295b548a45d48f359c658555ac9c0840_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

295b548a45d48f359c658555ac9c0840_JaffaCakes118
Size

71KB
MD5

295b548a45d48f359c658555ac9c0840
SHA1

4648df42d4806824ccb0c2c711f440c2382685c7
SHA256

3b617a30270d02591026556e02b2d15949a0e07390ddf214c871bbb6aecd1f35
SHA512

8ad7bfc5f70c197dab077784c71ef1ac0744d4173ec0bc72722699401ea461f724bab9b19fab06fada80c7b4e0aea653135a59e0531fadc14c892b268da69cb8
SSDEEP

1536:QCv4lq62Xs8J8H6UUAFQHLqBQNpamarkrZfIZefND7QVYGx4:9v4l28dFQrxN83IdHhAYGO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295b548a45d48f359c658555ac9c0840_JaffaCakes118

Files

295b548a45d48f359c658555ac9c0840_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ea478a3b73d2516d669e2d8f2eeb9ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcmp
iswcntrl
strcmp

user32

GetScrollPos
LoadKeyboardLayoutW
GetForegroundWindow
GetMenuStringW
SetDoubleClickTime
SendInput

wininet

ShowCertificate
InternetDialW
InternetGetCookieW
InternetSetCookieW
UrlZonesDetach

advapi32

LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose

Sections

.text
Size: 46KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE