3a7148aaf3ee66f6d9904e82392ab2eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a7148aaf3ee66f6d9904e82392ab2eb_JaffaCakes118
Size

21KB
MD5

3a7148aaf3ee66f6d9904e82392ab2eb
SHA1

9bd5f238b84d78dc910e15c890cf9b15abcee0c5
SHA256

d6ab192b793827954e5e733392cdb3ed21ea1b7284707b769eda2e541a6c1354
SHA512

2a23cfd45e22ada0052252189c4e81ead1017e0921e4a21b63a1b8aaa790444f7b864c3a9e946ca4069c6ee5668b9896348634b50baab9025da9d57f355e66e4
SSDEEP

192:M7ivennHaLUaYh5UFqnhFY+MelJePreHxUn+0vjlyjnacKpI60mlNsVAvuMNNnKi:s90xVhBaY5xg4vBb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a7148aaf3ee66f6d9904e82392ab2eb_JaffaCakes118

Files

3a7148aaf3ee66f6d9904e82392ab2eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bf676a7816930cd785e609eb46d4fab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetLastError
SetUnhandledExceptionFilter
GetCurrentProcess
CreateSemaphoreA
GetCurrentThreadId
lstrlenW
WideCharToMultiByte
Sleep
CreateThread

user32

PostThreadMessageA
GetMessageA
wsprintfA
GetInputState

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
VariantClear

wininet

InternetOpenA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA

msvcrt

_onexit
_stricmp
__dllonexit
_strlwr
??2@YAPAXI@Z
__CxxFrameHandler
strlen
memset
memcpy
??3@YAXPAX@Z

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE