60d5951e3d2013cec47f517ece80ba8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60d5951e3d2013cec47f517ece80ba8f_JaffaCakes118
Size

73KB
MD5

60d5951e3d2013cec47f517ece80ba8f
SHA1

1fa9fbe2aecdee654ac0d6852f69be27d0cfdbce
SHA256

eb0aa1fbf51e57269b41a7e25712b65c8072c62fe6442cff5f13ee0f3e278d1a
SHA512

ccf9ca660da67688c2c446c1b7977083c140c2b3616072e117b0372528fa722c4a3a023c000555ae932d9f79383dea934b242e4c2820436564e697722d77191a
SSDEEP

1536:tZE+Zk1JGLbWdt9Yp96mlm680DCys1ryZt6q68QPixN:te+xOHA96AMSpQKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60d5951e3d2013cec47f517ece80ba8f_JaffaCakes118

Files

60d5951e3d2013cec47f517ece80ba8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ea478a3b73d2516d669e2d8f2eeb9ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcmp
iswcntrl
strcmp

user32

GetScrollPos
LoadKeyboardLayoutW
GetForegroundWindow
GetMenuStringW
SetDoubleClickTime
SendInput

wininet

ShowCertificate
InternetDialW
InternetGetCookieW
InternetSetCookieW
UrlZonesDetach

advapi32

LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE