f4ec452ab572d1852c45e0691a5e018c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4ec452ab572d1852c45e0691a5e018c_JaffaCakes118
Size

5KB
MD5

f4ec452ab572d1852c45e0691a5e018c
SHA1

1a09464431a23110c2b67698f01944e1e78ec610
SHA256

798def044a1f3cb0d425a40a740a541d65aa9255931bf1ace5c0adf8afe91a44
SHA512

95838d9cbdabfce109e2acace01c60621b27c43da01d3a45bbae99b8af9472f2823c30507768d8be8a37634c67a5434a78d6c2d3a61948d1ac6e24f2359417eb
SSDEEP

96:cjmrRZvJz7JTWJFGYWSTGtFWSTG0TthGCJ9m0aV1:nZR7zYWLFWWTth9J9w1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4ec452ab572d1852c45e0691a5e018c_JaffaCakes118

Files

f4ec452ab572d1852c45e0691a5e018c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a997b2846b343630fd44e2abf45eff7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
PostQuitMessage
GetSystemMetrics
TranslateMessage
ShowWindow
FillRect
GetMessageA
SendMessageA
RegisterClassExA
LoadIconA
LoadCursorA
InvalidateRect
EndPaint
DrawTextA
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
wsprintfA
GetClientRect

kernel32

GetModuleHandleA
GetTempFileNameA
GetTempPathA
GetCommandLineA
GetSystemDirectoryA
lstrlenA
lstrcpyA
WriteFile
Sleep
LoadLibraryA
DeleteFileA
GetProcAddress
FreeLibrary
ExitProcess
CloseHandle
CreateFileA
CreateThread

gdi32

SetBkMode
SelectObject
GetStockObject
DeleteObject
CreateFontA

shell32

ShellExecuteA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetSetOptionA

winmm

timeGetTime

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE