f986543adfcb22806a7e6919be309cb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f986543adfcb22806a7e6919be309cb9_JaffaCakes118
Size

77KB
MD5

f986543adfcb22806a7e6919be309cb9
SHA1

d62a3bf96a42bfc2cde05af61d3bb130666223af
SHA256

5637d7ea2ce7fd4c4fe635cfead65a1e608f771bc334682585ce4b9cb2fd6073
SHA512

9bde2901379ac7cb7ac59934127ff7b74f557df4726a93cb48705790cd1f495cd094eaf75d97502628202dce2097685a970ef183cfd47b218a5d555d6265ddcc
SSDEEP

1536:oVggZVhQwSiZuYhNdcUvJqR7QlQvEz3JbrSSlMrNHIj:gYAuUMgqiaMcSleHIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f986543adfcb22806a7e6919be309cb9_JaffaCakes118

Files

f986543adfcb22806a7e6919be309cb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca85ad91cef327043d281092df85ddff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

LoadAlterBitmap
WantArrows
ChooseColorW
GetOpenFileNameW
CommDlgExtendedError

urlmon

IsJITInProgress
GetClassURL
CoInternetGetSession
CreateAsyncBindCtx
InstallFlash

user32

ModifyMenuW
LoadMenuW
GetWindow
MapDialogRect
IsChild
IsZoomed

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE