3817f05f794e4e0fcf6ee62e74a0b3e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3817f05f794e4e0fcf6ee62e74a0b3e2_JaffaCakes118
Size

39KB
MD5

3817f05f794e4e0fcf6ee62e74a0b3e2
SHA1

7ec0069ebf76880f6606560ad01f682c6d7f8ed0
SHA256

90e80c894a73df65908bfcead91d67898ffb04e7dc6bae553ae72d48a28e5dc3
SHA512

5a3140447fa5fbd59ba8fc41c34cf039983b812c65ea00c92188ab23ecd86ea90e294dfea62f76cfb3f5f4aeb828dcc41a5e00e103d124dee9ddd1e1002f1b15
SSDEEP

768:oXHyJNhh5IuMmK8u7LTOKxYtwXyl+6Z6JOG4ZpqZSm0mT7mf4:oXSJNOuMmKnTOKxRCsIaHT7n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3817f05f794e4e0fcf6ee62e74a0b3e2_JaffaCakes118

Files

3817f05f794e4e0fcf6ee62e74a0b3e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa2063f2162d42df3f2bd4f4d2e593da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_CIlog
_Strftime
__argc
__argv

urlmon

CopyBindInfo
ZonesReInit
DllInstall
ReleaseBindInfo

comctl32

CreateUpDownControl
DllInstall
DPA_Search
DPA_SetPtr

comdlg32

FindTextW
FindTextA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE