18689f381485b87058d783f5ded43302_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18689f381485b87058d783f5ded43302_JaffaCakes118
Size

14KB
MD5

18689f381485b87058d783f5ded43302
SHA1

ae42d54b8a1126dced0299c8b3bc1edb9f1702fe
SHA256

789a03272b7a0f2213825591393111e2ad792ade8a7b4d7c26f4c999d5c0c872
SHA512

57cfec57183d84108489107b9431fc86c0ffcb91a7c0129c8c9951c01efacec62206ffc3379b5022ea8caaa08d903c0b903d3b02b464b24b202d2e0e8f24fb88
SSDEEP

192:UkbN5jz5v+IDetEBwb9o4XuL+vsdtyApETBgdMI1qeAvcJRZXI0UwUSRlXwryalg:UuN5j9mCab9orLExPgeIcan9blXwyx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18689f381485b87058d783f5ded43302_JaffaCakes118

Files

18689f381485b87058d783f5ded43302_JaffaCakes118
.exe windows:4 windows x86 arch:x86

982e0d71dd2802d14b00b800de53cbf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE