178d975728e8f8bb1627962fd264a502_JaffaCakes118 | Triage

Sharing

General

Target

178d975728e8f8bb1627962fd264a502_JaffaCakes118
Size

142KB
MD5

178d975728e8f8bb1627962fd264a502
SHA1

ac09b3b8ad5a80641ff1a43a9fd6b6f6629dc5b2
SHA256

7c0450d9cb49a9a16f6792f88d83221aa29637e1ac88e476b9ecab2d44611839
SHA512

c4f484f2a749cb425d10fe3121cd226db755ee033162ae31f443089bfd343223239fcde48378d4f2577c9d9c4b626d7a3b6751c27a0a6b2afe98fc535505ff96
SSDEEP

1536:x+B9tEEJTx4gVUP4zL2ZZhs8zOJ4aSqfWK2PWEVJSJWXSaIH9m/Gy9N5gureuVZs:UB9WEJGgVc6WOJ4af2bJSJqSlHAGvMs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
178d975728e8f8bb1627962fd264a502_JaffaCakes118

Files

178d975728e8f8bb1627962fd264a502_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f37434addc242ac121cba92e52604405

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lwrite
VirtualAllocEx
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
GetCurrentActCtx

user32

BringWindowToTop
GetKeyNameTextA
EnumThreadWindows

tapi32

lineMonitorMedia

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ