dc37edded891a5745203afde80de06ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc37edded891a5745203afde80de06ad_JaffaCakes118
Size

17KB
MD5

dc37edded891a5745203afde80de06ad
SHA1

22802820eb02f45ac37971d365b8640d2b9f5a44
SHA256

e7a43e33fcf669f8cd98d200518b45f7d838a028b14fb8f22d8322c2df255b47
SHA512

14bb76f97555ed64f8338954e63b52ea5ee577df480cd5d6297aefc2678c982e3b6d9c687791c76711ee2ae7ef7c80d23ca672d1c417a23d9e2a2454da7fccf1
SSDEEP

384:k43OEZr/h0NXBiFtuBWN+8euEc4aHVI2gEHs:veELh0hBqtta7cXm2vs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc37edded891a5745203afde80de06ad_JaffaCakes118

Files

dc37edded891a5745203afde80de06ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b029ded94fecb3f5f44b3058e2f0de10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
SetUnhandledExceptionFilter
lstrcatA
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent
CreateFileA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetProcessHeap
UnhandledExceptionFilter
ExitProcess

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

PrintDlgW
GetOpenFileNameW
FindTextW
CommDlgExtendedError
ChooseFontW
GetSaveFileNameW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ