171448178c37f357431d8ea706796da4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171448178c37f357431d8ea706796da4_JaffaCakes118
Size

24KB
MD5

171448178c37f357431d8ea706796da4
SHA1

90c1580b2ea05792447bcc8cb3ea1a113b07c714
SHA256

c75fd6f02769bd8b7285409c8680650d25bc5b691206301dd6f20c5579499b51
SHA512

7c1e1a6da387198af6a4b2c2c020e06048a4220a909459526aa9fcd106c0aac071eaee377366b22c3580a51a1b386252002ec7fbcb7dc6ea5c9469801c2204e8
SSDEEP

768:JzWuxS7TSo2zNmhW3hWohw/kw5V85tV+:JzNxSH+zNCWxWKekQStc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171448178c37f357431d8ea706796da4_JaffaCakes118

Files

171448178c37f357431d8ea706796da4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47cbd265ddfa3f7f00c10bd380805fd4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
SetProcessWorkingSetSize
WritePrivateProfileStructW
GetSystemWow64DirectoryA
LZSeek
CreateProcessInternalW
ExitVDM
SetConsolePalette
CreateNlsSecurityDescriptor
FindResourceA
GlobalGetAtomNameA

user32

SetWindowLongA
EnumWindowStationsW
CreateWindowStationA
TrackPopupMenuEx
GetReasonTitleFromReasonCode
EnumWindowStationsW
CsrBroadcastSystemMessageExW
DrawCaptionTempA
DdeQueryConvInfo
GetCapture
SendMessageCallbackA
CtxInitUser32
SetMenuItemBitmaps
PrivateExtractIconsA

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ