d6c8f378b78e015e82cecb1ed98b5ae1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6c8f378b78e015e82cecb1ed98b5ae1_JaffaCakes118
Size

18KB
MD5

d6c8f378b78e015e82cecb1ed98b5ae1
SHA1

c5c67e5b588c980d826e140f0ecdb430c37af1f2
SHA256

f4abc30ddd00656e1ed44a47460e8248afcedeb739bd3a636d1c22b9436ec469
SHA512

712cdfd15e8f8b91d67d61d746bd1d7db816fad418d1c75aa489ffbb43b3d3eb562bf0e5a5e78de024b8c0bcd9e18a2ff196acae4d054ce95130e64a23f7cda2
SSDEEP

384:XFd3ufttkOiAKxTsJIT2oG8RWMWNxu/cZO:X/eVMKHmkxu0ZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c8f378b78e015e82cecb1ed98b5ae1_JaffaCakes118

Files

d6c8f378b78e015e82cecb1ed98b5ae1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a110c42179ef5db4e2e0822f18d4918e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryW
GetWindowsDirectoryW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
TerminateProcess
GetCurrentProcess

user32

EnableMenuItem
GetSystemMenu

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ