94cf52ae5617faaf08d169ce4bf106b8_JaffaCakes118 | Triage

Sharing

General

Target

94cf52ae5617faaf08d169ce4bf106b8_JaffaCakes118
Size

76KB
MD5

94cf52ae5617faaf08d169ce4bf106b8
SHA1

319f9b69cee47103bf998d04744408c9d970c02e
SHA256

a1fc7c43a80576a9586c494160f63984110977b4a2d1062a4aed4cd8a5ca2f05
SHA512

b34376c669ff32323caffb2ab6a9af1a6e7574902236f45d28b847529b8fca849c951adc5dca0bdacddde247c9ae5f4ba6ce8b575d72c9e0e35c874707fb0b7a
SSDEEP

1536:0t5tMQ6CT57YDADYbi6ODCarmQl1lddx/xvD:A5tz3VJSi6ODrrmwFh5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94cf52ae5617faaf08d169ce4bf106b8_JaffaCakes118

Files

94cf52ae5617faaf08d169ce4bf106b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

193b08c48ae198069192ca6590bd0344

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadImageA
GrayStringA
IsCharLowerA
GetWindowDC
GetSysColorBrush
HideCaret

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

Sections

.text
Size: 47KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE