159174d2bfb543be2aed47256c870aaa_JaffaCakes118 | Triage

Sharing

General

Target

159174d2bfb543be2aed47256c870aaa_JaffaCakes118
Size

17KB
MD5

159174d2bfb543be2aed47256c870aaa
SHA1

3ee18680170a51ec627fc327c34ebf91649fe901
SHA256

6be124296a5793bea880c4700b6ff6f892f8e3802f67903f34ce6f2a5248cf60
SHA512

dd6039088a9189470c1621ab23823dd0802a1e988758cedc61e7aa8f2be1e5da7716e09628f2ad311a712ac004b8ae4aec8e69769cb86b8341823b25c7d2ee5f
SSDEEP

192:HH9NpyHQ0Hhg0MpJ6yO3wxieYZvoRgG1R3VHjgG3T8haLGQX90qkvv+Keh0/0:n9bQe0UOAc9s1R5XqaaC9k3+pys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159174d2bfb543be2aed47256c870aaa_JaffaCakes118

Files

159174d2bfb543be2aed47256c870aaa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f5eec1a04ae8042d58a92df1662f2d9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryW
lstrcatW
CreateFileW
GetProcessHeap
RtlUnwind
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
ChooseFontW
GetSaveFileNameW
PrintDlgW
CommDlgExtendedError

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ