068dbb8a98c1f67c17a4d6f965d6c4e7_JaffaCakes118 | Triage

Sharing

General

Target

068dbb8a98c1f67c17a4d6f965d6c4e7_JaffaCakes118
Size

10KB
MD5

068dbb8a98c1f67c17a4d6f965d6c4e7
SHA1

296a62f581a0ab71ca58d4441dc320e41dd166a6
SHA256

39718fd56e6fa0228f46b1eef8d6a445bbbd36a2679c97d52aad7a8f481a300b
SHA512

f51647330f9d1c20fd6ce899eef7d02da16be500b3950aee79e25230bbbb8897f5dfd8ad86c503086e8f0d955de02e43a39396b50c6ee51e513d1c9254577170
SSDEEP

192:eN+fAT7fzJpnkwPFPnnZag7DJJtOs/LFpZMHE9LTQu33ClnmdvyCGN5u5Ve2p:OsAT7fdpkQFPnZdD3tTLFPMHyMxUdvyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
068dbb8a98c1f67c17a4d6f965d6c4e7_JaffaCakes118

Files

068dbb8a98c1f67c17a4d6f965d6c4e7_JaffaCakes118
.exe windows:1 windows x86 arch:x86

71467df94ca6c641716c144a31df08ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawStateA
EndMenu
EndPaint
EnumDesktopsA
FillRect
GetCaretPos

kernel32

EnumResourceNamesA
FindAtomA
FindClose
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary

urlmon

CoInternetParseUrl
DllUnregisterServer
FindMediaType
FindMimeFromData
GetClassURL

msvcrt

tanh
_strrev
_strset
_tolower
_utime
_wcsicmp
_wctime

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE