318d3df6e5fbaae933317a830ee1e245_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

318d3df6e5fbaae933317a830ee1e245_JaffaCakes118
Size

17KB
MD5

318d3df6e5fbaae933317a830ee1e245
SHA1

68d14da59d03647b38655e657ba558a11812f163
SHA256

2f8dc436bbe0e3f0999e4c23f4ce67cd1546d1215ef8a59e4096162cafe1a732
SHA512

4ba727fa044e49d6e1f475df13d831b504c62e1147bb27d4f0321233dcbe216a6f7d803bf67f016f002313d26386b5dfbcc452b2056bd679d5cea230ceee6ee5
SSDEEP

192:CvYp43OqAqt4+OD1Xxuh1B7NDOvoRw1l259+svAwMJl5HRgOX90qeiv4EQnB0/0:t43OtI4rxBuLWB1Y8sFQMg9/gEHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
318d3df6e5fbaae933317a830ee1e245_JaffaCakes118

Files

318d3df6e5fbaae933317a830ee1e245_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fa8560b3dd08ee001893e0edd10c4665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ