4ca73c5cf49552b224cb64f3ad43f161_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ca73c5cf49552b224cb64f3ad43f161_JaffaCakes118
Size

81KB
MD5

4ca73c5cf49552b224cb64f3ad43f161
SHA1

f682fdb4ddda4e52598e160dc5c8555abe376e00
SHA256

e5a8ced71881b4ee940b20b9e01d0e9976bd2855decd980013fe5ef640c6f258
SHA512

a5f05cf4e028568bede127ae55b39735223cf0aa47b1652835b857a36bac20d3c6dc11eba74d56b48ad1021c5b3938a18646961c664a38ab153e2578c3526a25
SSDEEP

1536:5kIszRLuySZUwoys8/uwa1a2bhd2QwWIi/0uETzbshZoGIbpo8b:5kIszR6yS+wo+I1d2SZBETzbsLoRo8b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ca73c5cf49552b224cb64f3ad43f161_JaffaCakes118

Files

4ca73c5cf49552b224cb64f3ad43f161_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e55f49b776c18ef6494dabb67a03c819

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDesktopW
CopyIcon
DrawTextW
FreeDDElParam
EqualRect

comctl32

ImageList_Add
FlatSB_GetScrollPos
CreateToolbar

urlmon

CDLGetLongPathNameW
IsAsyncMoniker
CopyStgMedium
UrlMkGetSessionOption
CoInternetParseUrl

kernel32

SetMailslotInfo
SetFileTime
SetConsoleIcon
SwitchToThread
TlsGetValue
WriteConsoleW

msvcrt

_ftime64
_heapadd
_iob
_ismbcl1
_futime

Sections

.text
Size: 42KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 153KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE