1bd4120655d049febe7c8282efbf77ed_JaffaCakes118 | Triage

Sharing

General

Target

1bd4120655d049febe7c8282efbf77ed_JaffaCakes118
Size

17KB
MD5

1bd4120655d049febe7c8282efbf77ed
SHA1

8ca04277ce6e8642872eef5e0560662f8295f99f
SHA256

c0a525a6b8b4fa4500d350b1492179c5e027698f21f23df57fd0042b0f2eb3c3
SHA512

c041985e5c3cfafc1fea18bc01d65d523d67fbf406527a3383c60fd5a8cef29668a09f4160c07d1a8f698705eca6e479703471d08073588b20bfe05c8ca2f358
SSDEEP

192:+43ONAqt4+OD1Xx+h1B7NjOvoRcl09+OUKAPXUc4AxZHNXI0qebv4EQnB0/0:+43OmI4rxB+rWN+8OuEc4aHVI2gEHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd4120655d049febe7c8282efbf77ed_JaffaCakes118

Files

1bd4120655d049febe7c8282efbf77ed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b029ded94fecb3f5f44b3058e2f0de10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
SetUnhandledExceptionFilter
lstrcatA
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent
CreateFileA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetProcessHeap
UnhandledExceptionFilter
ExitProcess

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

PrintDlgW
GetOpenFileNameW
FindTextW
CommDlgExtendedError
ChooseFontW
GetSaveFileNameW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ