4ad5aafc5d06c19a252502c6f724040e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ad5aafc5d06c19a252502c6f724040e_JaffaCakes118
Size

888KB
MD5

4ad5aafc5d06c19a252502c6f724040e
SHA1

2966723f037ebcb3cc9b851d3ae4dc9e5a33541b
SHA256

3c127e638e9f00fb1f39be4eb0275e0e41e2876918c1330238696f83f184bf0c
SHA512

457913a8ff6373824e6e728dc4e0b05fee855cdeee9303b4650b428728a55cc38e942ec88d326837e5db19013caf30dbd965d53b58bd28fa0d8161af3bfe3e0d
SSDEEP

12288:MKJip2KICcZbjligjNKz5utIEBa6dlKlKFFZ9djTgzzowcyXKJ1YxrUnA0v98TKO:MKJipQJjKAIRQvVdngHZXBrD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ad5aafc5d06c19a252502c6f724040e_JaffaCakes118

Files

4ad5aafc5d06c19a252502c6f724040e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b187e5895b0a431bfe98208adc4c5f29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW

wininet

InternetSetOptionW

msvcrt

_XcptFilter
exit
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_exit

comdlg32

PageSetupDlgW
PrintDlgExW
ReplaceTextW
GetFileTitleW

kernel32

GetProcAddress
GetLocaleInfoW
MultiByteToWideChar
GetCPInfo
GetACP
LoadLibraryExW
MulDiv
CloseHandle
SetEndOfFile
GetFileSize
GetLastError
ExitProcess
VirtualAlloc
GetStartupInfoA
GetModuleHandleA

secur32

InitializeSecurityContextW

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.n77s0u
Size: 825KB - Virtual size: 825KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ