8a30176c25d2df4d844aec27e4baa7f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a30176c25d2df4d844aec27e4baa7f2_JaffaCakes118
Size

16KB
MD5

8a30176c25d2df4d844aec27e4baa7f2
SHA1

3f5dcf417460289575772536d988f8a94eb9f574
SHA256

14c40e19dfb6fc9056cce576cbf5ebb2c5a8ce6a82412eec9c2328677264a12b
SHA512

aecfad5787ed0480c5903947f12bff97cbccb06322153bceeb497018511eb80170518cd28faf47affee9f5e83de39ddc183f89834b31d7edef857069cbe36a1c
SSDEEP

384:ZLJX9b+DUOtlcGwrgdA0zjyygCs5ZF7vjUNA1I:8UigO+7wA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a30176c25d2df4d844aec27e4baa7f2_JaffaCakes118

Files

8a30176c25d2df4d844aec27e4baa7f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e96a0a2d79974d34cd1dd952d707820

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadLibraryExA
ResetEvent
GetCommandLineA
SetEvent
InterlockedExchange
GetACP
CloseHandle
GetLocaleInfoA
ReleaseMutex
GetLastError
SetErrorMode
GetSystemDirectoryA
GetStdHandle
GlobalFree
RaiseException
FindFirstFileA
EnterCriticalSection
Sleep
HeapCreate
GetLogicalDrives

user32

GetParent
EndPaint
ReleaseDC
FlashWindowEx
GetWindow
wsprintfA
ShowWindow
ValidateRect
GetActiveWindow
BeginPaint
GetWindowTextA
FillRect
SetForegroundWindow
GetClassNameA
DrawTextA
FrameRect
GetCursorPos
GetFocus
IsIconic

httpapi

HttpTerminate
HttpInitialize
HttpCreateHttpHandle
HttpAddFragmentToCache
HttpAddUrl

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ