4bad65afafbed0c1ea42e391299fbd5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bad65afafbed0c1ea42e391299fbd5e_JaffaCakes118
Size

71KB
MD5

4bad65afafbed0c1ea42e391299fbd5e
SHA1

a2aedc419f0837a7d78216482c41a2a5f051a36d
SHA256

680dead5e217693d8067646758f703277e3dbba2b4c4ad45a8c475c1d8d90db1
SHA512

aeb5f87f126df45abd10a902736737902c24b30683d85acf1aac1095f4ea0b1ba2a2d3defee31d08505fe7e7ede4e7407f7477e49330c87308f1352680c0bec4
SSDEEP

1536:FK/98D5Qu2J5HLi/6jATZ9FQT2PJUOsQtXDnYXGi4:s/yFAHLi/dKyRVsQtTO4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bad65afafbed0c1ea42e391299fbd5e_JaffaCakes118

Files

4bad65afafbed0c1ea42e391299fbd5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

caceb142c64b8e730f8d20aff3809703

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

wininet

InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
UnlockUrlCacheEntryFile
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

?name@type_info@@QBEPBDXZ
_cabs
__wargv

Sections

.text
Size: 46KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE