01395f38c3126cf09d45ef9906f8dd3c_JaffaCakes118 | Triage

Sharing

General

Target

01395f38c3126cf09d45ef9906f8dd3c_JaffaCakes118
Size

77KB
MD5

01395f38c3126cf09d45ef9906f8dd3c
SHA1

da482ff89ac1b23a2b86b48947db91a63832315c
SHA256

1011c28cef398b3d3e50d6682466b1f4a85c845b40d92000c8b79da073513f32
SHA512

a1c62a30f4a7ec1a11affd99acbd302f7e7116852c189b1958f02ac04a52bdb72388392c748d46980e6eac15a4bb57e18d1352a07128261abd015ef1c059497e
SSDEEP

1536:4kCUTgsoux9mi5zeSilpGXAkxsk0lqh858mCAzWz9AW4DT2:JCUbouxJGGD0khhmnzWz9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01395f38c3126cf09d45ef9906f8dd3c_JaffaCakes118

Files

01395f38c3126cf09d45ef9906f8dd3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6374bb0b37a7db8c8be7f258c76c831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_itow
iswcntrl
isxdigit

advapi32

LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose

wininet

InternetDialW
InternetGetCookieW
ShowCertificate
InternetSetCookieW
UrlZonesDetach

user32

GetForegroundWindow
GetMenuStringW
GetScrollPos
LoadKeyboardLayoutW
SetDoubleClickTime
SendInput

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE