0569e647bb5b21c5ec3326f3ac7ca80e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0569e647bb5b21c5ec3326f3ac7ca80e_JaffaCakes118
Size

8KB
MD5

0569e647bb5b21c5ec3326f3ac7ca80e
SHA1

d365d9f2356f12e792c7e87a0adcbfcefd9dca8c
SHA256

b531581401d4d619621077a2f0ae80e3a4a67008b977316ea04a5269e33b1743
SHA512

bae48184da609f364fdf1809667caab610efcfb13fd1360b0787c7143e7d8d944034db6818c59fca5604dd8086f7b42b501aad14da781a3d1f72430bdd61bfa8
SSDEEP

192:3bTFi3QuGdKkiCBCyuFJiHTXYkeRTvsyE0XJwhAd8TFfhDp3sHb5Fyge:q2x3CyuDGXYkelvsyE05vdMJhN3s7Py

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0569e647bb5b21c5ec3326f3ac7ca80e_JaffaCakes118

Files

0569e647bb5b21c5ec3326f3ac7ca80e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ce636e0a21175efbe7950cd87794030

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawStateA
EndMenu
EndPaint
EnumDesktopsA
FillRect
GetCaretPos

kernel32

EnumResourceNamesA
FindAtomA
FindClose
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary

msvcrt

_y0
_strrev
_strset
_tolower
_utime
_wcsicmp
_wctime

urlmon

CoInternetParseUrl
DllUnregisterServer
FindMediaType
FindMimeFromData
GetClassURL

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE