ed6914d92f8b9755dea763e6470b6969_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed6914d92f8b9755dea763e6470b6969_JaffaCakes118
Size

71KB
MD5

ed6914d92f8b9755dea763e6470b6969
SHA1

8e37f695f6b93db7530cf6172b5b358b9f8d698e
SHA256

5f26e6f67a64a41e1c55c90d2c9743088a5fe8c0ef0ce63d8cb907f5878e60bb
SHA512

9f035e5e983716602970a4ed141f5b0b70fc6c771e6ed221e50326896a0be1d63f8e150955fdd04d2ea97fdc9e7ad2b5e9416937026d1c6c5713bfe9853a8d66
SSDEEP

1536:VkaZIsfu6Wa9/kDt/VHOnWfQ+kYCWumGVxUWIq2q4:VkaOyWNhFOXyCc45In

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed6914d92f8b9755dea763e6470b6969_JaffaCakes118

Files

ed6914d92f8b9755dea763e6470b6969_JaffaCakes118
.exe windows:4 windows x86 arch:x86

caceb142c64b8e730f8d20aff3809703

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

wininet

InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
UnlockUrlCacheEntryFile
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

?name@type_info@@QBEPBDXZ
_cabs
__wargv

Sections

.text
Size: 46KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE