2af8f2a86bc6ad91995c263bcaa144b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2af8f2a86bc6ad91995c263bcaa144b8_JaffaCakes118
Size

17KB
MD5

2af8f2a86bc6ad91995c263bcaa144b8
SHA1

989954abbe48cf97d9248bf895101d5f220386ef
SHA256

431118efe793ed9cbe7cabfc800bc68b27a7a81e24bb6ee5c2ce6f026dde50bf
SHA512

f1220934e8df0a4ad7081d806c62eedac59b299fdb336b63608d686bb66a91b44aa450ab5064aea3eba2a3936a09f08b7b93e38a1868015a89abb19ac97a73a9
SSDEEP

384:/43OxZr/h0NXBiFtuBWN+8euEc4aHVI2gEHs:Qe3Lh0hBqtta7cXm2vs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af8f2a86bc6ad91995c263bcaa144b8_JaffaCakes118

Files

2af8f2a86bc6ad91995c263bcaa144b8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b029ded94fecb3f5f44b3058e2f0de10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
SetUnhandledExceptionFilter
lstrcatA
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent
CreateFileA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetProcessHeap
UnhandledExceptionFilter
ExitProcess

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

PrintDlgW
GetOpenFileNameW
FindTextW
CommDlgExtendedError
ChooseFontW
GetSaveFileNameW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ