59ff0d151adcb3c00e54835293f7329f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59ff0d151adcb3c00e54835293f7329f_JaffaCakes118
Size

76KB
MD5

59ff0d151adcb3c00e54835293f7329f
SHA1

39840ac8bfb27d92765aec24e1098dd4bff7b13f
SHA256

e3ac0a64dba90a803c9fcfa64314e7b6358e50fa9389b75b4667954cf246e0d6
SHA512

629867fc94e601a91796bab0d8ec677ae160b4ece61c3bd88f0e260587eff007cf13d33ab41b4f1d961a79d16beb65352677847443c6a56056eea17ccd203565
SSDEEP

1536:nFEhCTfPK7aLamUqpiwT8hEsKuyhpeQnMDbJjtvV37ABI53sW4Ds:nzfdLl7AIfThPnM/JhvVXNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59ff0d151adcb3c00e54835293f7329f_JaffaCakes118

Files

59ff0d151adcb3c00e54835293f7329f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6374bb0b37a7db8c8be7f258c76c831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_itow
iswcntrl
isxdigit

advapi32

LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose

wininet

InternetDialW
InternetGetCookieW
ShowCertificate
InternetSetCookieW
UrlZonesDetach

user32

GetForegroundWindow
GetMenuStringW
GetScrollPos
LoadKeyboardLayoutW
SetDoubleClickTime
SendInput

Sections

.text
Size: 47KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE