775f4073d0bb10680b48d709cadf9782_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

775f4073d0bb10680b48d709cadf9782_JaffaCakes118
Size

81KB
MD5

775f4073d0bb10680b48d709cadf9782
SHA1

7faa00f49cca9a76f27214da92367417567c75b9
SHA256

bbc325ce1c24b243f8f160e5e67688c0ec0ca2d08d54b06bc7deb8cc2afa84b7
SHA512

4397a82c7845a9ecce46b0bc1f890b41437b3967acd0733a589ee482342cacb2ad8fe811bd3a27b41241d8387bfe239609c009ea040f1a537e20c5e429990600
SSDEEP

1536:B54/ApqjJD3sswG4u940aN0qHLATdJyL8C7:/4IpWJLVXv40aNvETf6F7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
775f4073d0bb10680b48d709cadf9782_JaffaCakes118

Files

775f4073d0bb10680b48d709cadf9782_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e55f49b776c18ef6494dabb67a03c819

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDesktopW
CopyIcon
DrawTextW
FreeDDElParam
EqualRect

comctl32

ImageList_Add
FlatSB_GetScrollPos
CreateToolbar

urlmon

CDLGetLongPathNameW
IsAsyncMoniker
CopyStgMedium
UrlMkGetSessionOption
CoInternetParseUrl

kernel32

SetMailslotInfo
SetFileTime
SetConsoleIcon
SwitchToThread
TlsGetValue
WriteConsoleW

msvcrt

_ftime64
_heapadd
_iob
_ismbcl1
_futime

Sections

.text
Size: 42KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 153KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE