f6f208a6f8d76ad0b5fb3d9da71167b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6f208a6f8d76ad0b5fb3d9da71167b9_JaffaCakes118
Size

81KB
MD5

f6f208a6f8d76ad0b5fb3d9da71167b9
SHA1

110f3d06796daa855f0c3c7f769a9393ded3d6d0
SHA256

7e69b1bae768d177409f110dcdf76b14001764143a84f70b713fdc99d9b901f7
SHA512

cef484e62e0a505c1bcb04ea741a7b59ff20d3f89c9893ea76a1121ec9309b26df348e9b755737293bf6993f61c562072329c02712c0c06c31dedd9832ce16b3
SSDEEP

1536:0uu9VRXUX6Hm9zIrRRlzwG4JUg6qVbVzpWxbeQu5rBda9kHuBx7V2CBSlSJD:0uu9VxUfywVJUg6+4xbez7W+y7V9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6f208a6f8d76ad0b5fb3d9da71167b9_JaffaCakes118

Files

f6f208a6f8d76ad0b5fb3d9da71167b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

293a087e69e907612738d4995bb51c96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Add
FlatSB_GetScrollPos
CreateToolbar

user32

CreateDesktopW
CopyIcon
DrawTextW
FreeDDElParam
EqualRect

urlmon

CDLGetLongPathNameW
IsAsyncMoniker
CopyStgMedium
UrlMkGetSessionOption
CoInternetParseUrl

kernel32

SetMailslotInfo
SetFileTime
SetConsoleIcon
SwitchToThread
TlsGetValue
WriteConsoleW

msvcrt

_ftime64
_heapadd
_iob
_ismbcl1
_futime

Sections

.text
Size: 42KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 153KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE