3554de33da40ebfca448ae4711449251_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3554de33da40ebfca448ae4711449251_JaffaCakes118
Size

75KB
MD5

3554de33da40ebfca448ae4711449251
SHA1

b63b29e1afa9ec11701d43ba995d060481bd0f0a
SHA256

a415c2fe00d9b0fcbbcb291885daed22eddab4aa948377855f0c7193aa502e1e
SHA512

dd9e3f8caa39483e33e1a8e263a1dd47dd5b611ddf6b36599b22bcc3505f1fc12a1a3d75bde378572d447b7928616c8442a3182fd02b185f9b44d477ea1011b7
SSDEEP

1536:Mv3hAhhs8maxn0n4KvIUmrn/rJlBNQgebwuzZ:MvxAX10n4JnDJjWgeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3554de33da40ebfca448ae4711449251_JaffaCakes118

Files

3554de33da40ebfca448ae4711449251_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddaa08ec4ae1b0eccc5bd12fd3bb8c20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

Sections

.text
Size: 46KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE