243231dede2077af5dce5b10a67bc134_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

243231dede2077af5dce5b10a67bc134_JaffaCakes118
Size

85KB
MD5

243231dede2077af5dce5b10a67bc134
SHA1

9325a1452e0d5fd3f34ca0cf6748ab1f0d14ffdb
SHA256

cb300de93fb5c39f1a3feb9b0658c1fb5af1fd65467b5755704ac6ebd3f488ee
SHA512

c8da6a1c89c38c1c048bfc2784f23382222510d64a02a9bda3396b4cb55b7a4b65de27e004757ead7003635c6dff10e644a11b0660d12644f9456caeefd5eb4c
SSDEEP

1536:NFbfQ760un1x4QOuVjhSfkRfefuSIYE3jgS6Lvv:NFbfQ760un1dOuVgfGef+5jkL3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
243231dede2077af5dce5b10a67bc134_JaffaCakes118

Files

243231dede2077af5dce5b10a67bc134_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e566effe09622c7aafaf787ac56196e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE

Imports

kernel32

BackupRead
DuplicateHandle
CancelIo
EnumTimeFormatsW
ExitProcess
CommConfigDialogW

urlmon

FaultInIEFeature
GetClassFileOrMime
CoInternetParseUrl
ReleaseBindInfo
URLOpenStreamA

comdlg32

GetSaveFileNameA
LoadAlterBitmap
ChooseColorA
dwLBSubclass
ReplaceTextA

comctl32

DrawStatusTextA
ImageList_DragEnter
DrawInsert

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE