3b9472b047d5223c07747249b5b0ba23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b9472b047d5223c07747249b5b0ba23_JaffaCakes118
Size

7KB
MD5

3b9472b047d5223c07747249b5b0ba23
SHA1

4b5cae754588797071d1a61246fd3a3fed920097
SHA256

e507e057ff8d0b5556dfb3bf32ecf9145cf1ff3b1b90c6ef2c9a7bc57b1dbe0b
SHA512

a8b835b5c2caf1d7f6eb3051b31db730d43e71a304af3a7ee99d089efa5b7f7b773a94e910662c436e89a5827904be304afac995a82b2d79b2bdef419cae33d2
SSDEEP

96:nIgWY3SWB63Yvs/Fju92Ty4GtuRpw4zGI5XB098MySQ:nRJ3NcY09jls8pw4zGI4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b9472b047d5223c07747249b5b0ba23_JaffaCakes118

Files

3b9472b047d5223c07747249b5b0ba23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d236db6325ca34182be15681f3aa0d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
RegisterHotKey
SetWindowsHookExA
UnhookWindowsHookEx
MessageBoxA
GetMessageA
GetForegroundWindow

kernel32

CreateFileA
GetFileSize
GlobalAlloc
Sleep
lstrlenA
CloseHandle
CreateMutexA
CreateThread
ExitProcess
ExpandEnvironmentStringsA
FindFirstFileA
GetLastError
GetModuleHandleA
GetTickCount
OpenMutexA
ReleaseMutex
RtlMoveMemory
RtlZeroMemory
ReadFile
lstrcatA

advapi32

GetUserNameA

wininet

InternetOpenA
InternetConnectA
InternetCloseHandle
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
InternetOpenUrlA

shell32

ShellExecuteA

ole32

CoGetMalloc

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 519KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE