423e8b3de5840590aad0ea71f8131bea_JaffaCakes118 | Triage

Sharing

General

Target

423e8b3de5840590aad0ea71f8131bea_JaffaCakes118
Size

41KB
MD5

423e8b3de5840590aad0ea71f8131bea
SHA1

4f1de4092e0d3362d813522fe34254dd947a396f
SHA256

71df283ddb3007981e727c0f1522c0425fd5a10b553a2161759e076995201c14
SHA512

2b23109b8036681dc2aa397978177170044356894dcfe533eaddbc0f1f751a1c729302685931125e89e74818faca542ee8359868e5ced0dba9e5416d19192e10
SSDEEP

768:ru6rC6PcdwzbfE7VhsEOrtuUd7Q8T3/poBtSmo0gzeQFxh40mXA9rrV7NMp:a6rCkcdwzbqhsD4Ud08D/poje0gDFYNB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
423e8b3de5840590aad0ea71f8131bea_JaffaCakes118

Files

423e8b3de5840590aad0ea71f8131bea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69069cffed8c173d36659b4fe3f50084

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
VirtualProtect
GetLocaleInfoA
CloseHandle
GetDriveTypeA
FileTimeToLocalFileTime
GlobalDeleteAtom
LockResource
HeapCreate
GlobalAddAtomA
SetErrorMode
GetLastError
LoadLibraryExA
GetStdHandle
GetACP
Sleep
IsBadReadPtr
RaiseException
SetConsoleOutputCP
EnterCriticalSection
InterlockedExchange

user32

ValidateRect
GetWindowTextA
GetWindow
SetForegroundWindow
GetActiveWindow
IsIconic
GetCursorPos
GetFocus
GetClassNameA
ReleaseDC
DrawEdge
GetMenuItemInfoA
GetParent
EndPaint
ClipCursor
BeginPaint
ShowWindow
wsprintfA
DrawTextA

httpapi

HttpRemoveUrl
HttpInitialize
HttpCreateHttpHandle
HttpAddUrl
HttpTerminate

msutb

GetPopupTipbar

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE