605de3feb8db9835756c74b1d504fcca_JaffaCakes118 | Triage

Sharing

General

Target

605de3feb8db9835756c74b1d504fcca_JaffaCakes118
Size

77KB
MD5

605de3feb8db9835756c74b1d504fcca
SHA1

50c593e60140e7f7647ecc46ceb3004aafda0a72
SHA256

bdfb96a4a7ca201fde18521b614ddcc68c96bfdbec1c49f4ab0f2caf15621621
SHA512

d4408143d1d866d8e8bc785e1955350877ec6e37b2cac640d3c2694b2904a4297619a00322d4f6f4a73ac1b13416045214e70d1d6bc08ae923a2864bf52bc1a4
SSDEEP

1536:3ZG9QWr/APfJWm02JlWd/Oag+GClqHBbbaIw8ZSS:3ZCZDtwOQaNKaIpSS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
605de3feb8db9835756c74b1d504fcca_JaffaCakes118

Files

605de3feb8db9835756c74b1d504fcca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62b38c005b8f69af85d30767826d174b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegFlushKey
DecryptFileW
ReportEventW
ReadEventLogW
OpenThreadToken

wininet

GopherFindFirstFileA
GopherOpenFileW
FtpGetFileW
FreeUrlCacheSpaceA
HttpQueryInfoA

user32

DrawIcon
DestroyCaret
FillRect
GetActiveWindow
GetMonitorInfoW
GetShellWindow

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE