fbfa6de32f7976d17932f73d6b3b0ceb_JaffaCakes118 | Triage

Sharing

General

Target

fbfa6de32f7976d17932f73d6b3b0ceb_JaffaCakes118
Size

75KB
MD5

fbfa6de32f7976d17932f73d6b3b0ceb
SHA1

9c0c83641a45805227a26cfbbd6845b5683d6b6d
SHA256

cb2a322b48a9624bfb0c8dc1efdd1d66ece81d98509a76bd4874ebd1035994c9
SHA512

51adfe91b875f4b2f99c974a2f51e7290bbfc83d025b9a85760fb6ed7a334586434ce0ed95deb4cb275911b95af54054c597cfc5ac6017ff0dba0b47c2debbce
SSDEEP

1536:7WfK33RT/JcWVYUZXG/dUHxEUH9Knvtb8cvvAe6:CfM3tJcWyUBG/dUREINgAe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbfa6de32f7976d17932f73d6b3b0ceb_JaffaCakes118

Files

fbfa6de32f7976d17932f73d6b3b0ceb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

193b08c48ae198069192ca6590bd0344

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadImageA
GrayStringA
IsCharLowerA
GetWindowDC
GetSysColorBrush
HideCaret

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

Sections

.text
Size: 46KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE