0fa0bfca273bf9bda2ae1d27513a6a59_JaffaCakes118 | Triage

Sharing

General

Target

0fa0bfca273bf9bda2ae1d27513a6a59_JaffaCakes118
Size

39KB
MD5

0fa0bfca273bf9bda2ae1d27513a6a59
SHA1

602d3c0fb0a10601fe789565ea426abcea14784b
SHA256

f3a44b20e917386061d5069866306f9e2bde299c22138b9b6742fb14d7714540
SHA512

e83a897f5c842914e3db6350de529c1fec4f52122c6a0b3af2eb6172c163b4fa924611ed549ca23ef10f43c258a293838dc71bf38502a899e8bf8a131b54980d
SSDEEP

768:mBS+UJIHhE/u9ZNDZZXcckeL4OV1d1e14Tj6yd3jUi8K2:mtFhYa/NuS4enTjtN8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa0bfca273bf9bda2ae1d27513a6a59_JaffaCakes118

Files

0fa0bfca273bf9bda2ae1d27513a6a59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

403d596fa27c0d7f7ea77ef551b13f8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

FindMimeFromData
CoInternetQueryInfo
HlinkGoForward
CoInternetParseUrl
CoInternetCombineUrl
BindAsyncMoniker

msvcrt

strcpy
strlen
_ismbcl1
_gcvt
_heapchk
_scalb
memcmp

kernel32

LocalLock
LocalFree
GlobalAddAtomW
LocalAlloc
GetVersionExA
GlobalCompact

gdi32

LineTo
MoveToEx
GetViewportOrgEx
GetObjectW

Sections

.text
Size: 22KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE