f4dc5e4975ed544e9ccfda8d2de86edb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4dc5e4975ed544e9ccfda8d2de86edb_JaffaCakes118
Size

81KB
MD5

f4dc5e4975ed544e9ccfda8d2de86edb
SHA1

920a08ef97d6f1da6406554b764b2c272114c6c5
SHA256

2ee4b2f9ca449fa7187bc216b1718a3b498ca1e43984cb20b1cf0627625bcd7b
SHA512

26681b0194e65270ab42384fed40aefb5c908b4c2a5fe55b91dc59764ae03f1cfb255147797ad7dec1575d97666b0ed0ea67d7551ea2cd072bf11b1b8d868069
SSDEEP

1536:cAm0MrOHgea+qZQFE/kUGUHCqbhsdun1VcHniugdceNs5yWvHy2J:cA4O1YQ3UGUHSunDcHnifhNwvHy2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4dc5e4975ed544e9ccfda8d2de86edb_JaffaCakes118

Files

f4dc5e4975ed544e9ccfda8d2de86edb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13650592bc7f35e80e7cec1383813cd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
malloc
free
__dllonexit
_initterm
_except_handler3
_adjust_fdiv
__CxxFrameHandler

user32

GetMessagePos
InvalidateRect
EnableWindow
ScreenToClient
GetKeyState
ClientToScreen
SendMessageW

kernel32

LocalFree
GetLastError
VirtualAlloc

cmdial32

AutoDialFunc
CmCustomHangUp

ws2_32

WSASocketA

crypt32

CryptFormatObject

Sections

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE