182d10f02592b398575cb25bccc8ad8b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

182d10f02592b398575cb25bccc8ad8b_JaffaCakes118
Size

32KB
MD5

182d10f02592b398575cb25bccc8ad8b
SHA1

e9eabd6d65b65a72056fdf9bd287333c17bd0495
SHA256

125f6162e8cdfb9d82dd3dc68a39a5cba2fe8729e8addc303197c1072d5b1bb7
SHA512

f1f0bd75f5e8eef784daa2993fcd88a2f75999eeb5ddde767ba10ea0cc617869f79efd0d376ef0d6aa233ccedbff20d3ed1b6b5c5ec06d7629c03b634d8315f5
SSDEEP

768:ENWhilnkaM6a2cBfJ5EzHUXy1AqaRumjr6B:EN1nkDbBBOUX6l6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
182d10f02592b398575cb25bccc8ad8b_JaffaCakes118

Files

182d10f02592b398575cb25bccc8ad8b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10a0b512fd8cf9e448a0fdcddf08415b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
GetWindowModuleFileNameW
DdeDisconnect
DestroyIcon
OpenDesktopA

kernel32

GetLastError
VirtualProtect
HeapCompact
TlsSetValue
EnumResourceLanguagesW
DeleteTimerQueueEx

gdi32

GdiConvertMetaFilePict
SetSystemPaletteUse
ExtSelectClipRgn
GetNearestColor
GdiPlayScript
GdiFullscreenControl
GdiAlphaBlend

comdlg32

WantArrows
PrintDlgW
ReplaceTextW
dwOKSubclass
LoadAlterBitmap
GetOpenFileNameA

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE