3bf5b13ab7a3c454acf5ba72371319a6_JaffaCakes118 | Triage

Sharing

General

Target

3bf5b13ab7a3c454acf5ba72371319a6_JaffaCakes118
Size

73KB
MD5

3bf5b13ab7a3c454acf5ba72371319a6
SHA1

cffb1c83ba2b26454da0480c0a8192ce9d2c8447
SHA256

8c644a0b2ecc37abe7747f910cebbecc842a8b6b2a643c0752669d2c91ebc241
SHA512

6602cfcb924cc45cb614c0de4cb08dff525aa104e96d445f817e57a9452334141bf97a5692b522753ac1a10c9c9a82e8f84af83dccd372c6ee38edad91195810
SSDEEP

1536:ILdrrByNVAYCYRt1G62ygxuUCAzFmAA6vJLEVZFPcpNM:WrgSYRnVJgxuBc1zN03P/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf5b13ab7a3c454acf5ba72371319a6_JaffaCakes118

Files

3bf5b13ab7a3c454acf5ba72371319a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61b16071e9e30e3dd3f4718bc6780ae6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

?name@type_info@@QBEPBDXZ
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

wininet

InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
UnlockUrlCacheEntryFile
InternetSetDialState
ShowSecurityInfo

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE