4cddae50d1f54383d96957789167b68f_JaffaCakes118 | Triage

Sharing

General

Target

4cddae50d1f54383d96957789167b68f_JaffaCakes118
Size

888KB
MD5

4cddae50d1f54383d96957789167b68f
SHA1

417d8a4f3172176cbe48655d386cb9e5638005e7
SHA256

84fb13ab8e187654f0e5e82453c25092ff2e736aa524494fa14df77237b0b513
SHA512

bc194d9b14016069c6278f9362ea1a4267e4a757f13b6d35ec95051d83a4ba72d54bf23de89c6b6d1bc4968fd2e2675f4bdfaefef0e69423c92055c21689928b
SSDEEP

12288:MKOK3NN4IZwiHZ0A3yvgCQeCMQKJ3KCjGLsnkh+Nt1nOuwcyXKJ1YxrUnA0v9zTv:MK1N62l3yvgCQxMQKJ3+7vXBr0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cddae50d1f54383d96957789167b68f_JaffaCakes118

Files

4cddae50d1f54383d96957789167b68f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b187e5895b0a431bfe98208adc4c5f29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW

wininet

InternetSetOptionW

msvcrt

_XcptFilter
exit
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_exit

comdlg32

PageSetupDlgW
PrintDlgExW
ReplaceTextW
GetFileTitleW

kernel32

GetProcAddress
GetLocaleInfoW
MultiByteToWideChar
GetCPInfo
GetACP
LoadLibraryExW
MulDiv
CloseHandle
SetEndOfFile
GetFileSize
GetLastError
ExitProcess
VirtualAlloc
GetStartupInfoA
GetModuleHandleA

secur32

InitializeSecurityContextW

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.n77s0u
Size: 825KB - Virtual size: 825KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ