64c73f61265043b9fe3ec426896b5bc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64c73f61265043b9fe3ec426896b5bc6_JaffaCakes118
Size

7KB
MD5

64c73f61265043b9fe3ec426896b5bc6
SHA1

16d14caff11f2afc53e97012f6cebc53555d5650
SHA256

3a64229f5d3974be542e09db21b4fc5b2dc004190baab7307eb8dbd111f00ffa
SHA512

e05af22cc03da9ebf12751a81444747555c990fe5105850d3c0cae26cab986e72205bb575e3f27207253727e1d8e88a402c4d062e237c9dc125cba72d6aa3f94
SSDEEP

192:xLvgJmXR0sW8xihR+9kHAkgkGUMDv5fcxH9kZoUInzJE7:xLIJmiP8B9IvKv5kxSmxNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64c73f61265043b9fe3ec426896b5bc6_JaffaCakes118

Files

64c73f61265043b9fe3ec426896b5bc6_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3eb1833a00f4215369907e38d882d0a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
DefineDosDeviceA
EnumDateFormatsA
FillConsoleOutputAttribute
FreeResource

comctl32

FlatSB_SetScrollRange
AddMRUStringW
RemoveWindowSubclass
Str_SetPtrW
_TrackMouseEvent

urlmon

FaultInIEFeature
InstallFlash
RevokeBindStatusCallback
GetClassFileOrMime

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE