3bb7f8feeb603f3e3f54c521b794c7da_JaffaCakes118 | Triage

Sharing

General

Target

3bb7f8feeb603f3e3f54c521b794c7da_JaffaCakes118
Size

77KB
MD5

3bb7f8feeb603f3e3f54c521b794c7da
SHA1

818a185c2f5e8f2b71fe032f718f436ef256f747
SHA256

1f8d6e91699dcf2920058a265bb1d8991dbb1bddfb45d22dfa282f9b545e27be
SHA512

8cdd388c0a2afeb98347a8b67aa6d20e4a77639c8ca14174b5bfccf09052a736905fd15762921afedb6c66d6c7feb2c153d6e664ef206dd6844c5514028b0abd
SSDEEP

1536:2X9GJPAqJo+iePnM6sQ9qgnim5i7s/QveT99/iLa:goUGMh6qgiGiQ9h9/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bb7f8feeb603f3e3f54c521b794c7da_JaffaCakes118

Files

3bb7f8feeb603f3e3f54c521b794c7da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61b16071e9e30e3dd3f4718bc6780ae6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

?name@type_info@@QBEPBDXZ
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

wininet

InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
UnlockUrlCacheEntryFile
InternetSetDialState
ShowSecurityInfo

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE