189b0e674ceb7d99da3ed2a6f6aae780_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

189b0e674ceb7d99da3ed2a6f6aae780_JaffaCakes118
Size

71KB
MD5

189b0e674ceb7d99da3ed2a6f6aae780
SHA1

dfcb34c137d984790a2f84965976f743ca53335e
SHA256

f63c8cad1bd0e0927fc0d300e61a75583f65ac74b7154321a09fce973882830c
SHA512

454030b7a530c338097deb5db712d06276da0d11190b86ed07549450c57637c54caf7192b2fe7ba8fc7867191778bc3b1b5d9f731a57e4a488b85bd73afcf560
SSDEEP

1536:orS1pUtl8Ppp1J3CK7vwvmDmXqVqQvQ9Kx:BpuSLTCCTYiz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
189b0e674ceb7d99da3ed2a6f6aae780_JaffaCakes118

Files

189b0e674ceb7d99da3ed2a6f6aae780_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ea478a3b73d2516d669e2d8f2eeb9ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcmp
iswcntrl
strcmp

user32

GetScrollPos
LoadKeyboardLayoutW
GetForegroundWindow
GetMenuStringW
SetDoubleClickTime
SendInput

wininet

ShowCertificate
InternetDialW
InternetGetCookieW
InternetSetCookieW
UrlZonesDetach

advapi32

LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose

Sections

.text
Size: 46KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE