2b225bc03617ef08796535dec927c1fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b225bc03617ef08796535dec927c1fe_JaffaCakes118
Size

77KB
MD5

2b225bc03617ef08796535dec927c1fe
SHA1

6598e6773d4e26ac8907e702b872ea08f5ff30ca
SHA256

d5a1996767f3df5cc13929318add5df2470d4479bf242d3d486700cc447f42c6
SHA512

41df901944d980a0fb5e05c3ae43b52313485321ba41a4143e70cfe6e056701e7604af55ec9273912db2b54153c0c7ead42162fdee87e5041e1278e8b9e79643
SSDEEP

1536:7Ng5OC83H3BB48AQP/B7NDMhrNDNp9SxUAmLud:7C8hhB4SB7ahrJAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b225bc03617ef08796535dec927c1fe_JaffaCakes118

Files

2b225bc03617ef08796535dec927c1fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4541550b46f5816921f2aff51821bcc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

urlmon

FaultInIEFeature
GetClassFileOrMime
CoInternetParseUrl
ReleaseBindInfo
URLOpenStreamA

comctl32

ImageList_DragEnter
DrawInsert
ImageList_Remove

msvcrt

memcpy
memcmp
strstr
strlen
strcpy

kernel32

CancelIo
EnumTimeFormatsW
ExitProcess
BackupRead
DuplicateHandle
CommConfigDialogW

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE