8c923fd87a5a74548c486255d3fa3b59_JaffaCakes118 | Triage

Sharing

General

Target

8c923fd87a5a74548c486255d3fa3b59_JaffaCakes118
Size

17KB
MD5

8c923fd87a5a74548c486255d3fa3b59
SHA1

d4e9cbe44d27f38f1952000f4b74b1afbb919b75
SHA256

a136169023918a923986ec715070e20320087135ec6bb6221c58c61bee584aed
SHA512

6913783a6cb4bc112d4a3e87a16a40cdac207c339934e6731a7790533aa659fe01499e557933739c88293f55a6bd72e3e8aebb6d04970fec129d714276f4bde9
SSDEEP

384:L43OMZr/h0NXBiFtuhWB1Y88FQMg9/gEHs:MecLh0hBqttBOFQP/vs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c923fd87a5a74548c486255d3fa3b59_JaffaCakes118

Files

8c923fd87a5a74548c486255d3fa3b59_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fa8560b3dd08ee001893e0edd10c4665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ