9491293cf5bce992dbbbc6d3544457e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9491293cf5bce992dbbbc6d3544457e6_JaffaCakes118
Size

75KB
MD5

9491293cf5bce992dbbbc6d3544457e6
SHA1

390f73862866cc254b79575a217554eb535cd1e9
SHA256

a6dece58b4406acae06471612f8cc1c104e33bdeffb53a38ba8f72073cc4f7b2
SHA512

4a23522acf896210569f9a7762b7581fab38a6428900ade7bf9639f323df6b1b1e6752defea9e4f9eae9610456f47b059faf6bc9c7f02c1ba4ce5784cf484b5c
SSDEEP

1536:6bQ77/O91qaG3JbMPZ6pPB7GvAEig+qqFh:6Mnm91qn3JMY9ZiAvgvC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9491293cf5bce992dbbbc6d3544457e6_JaffaCakes118

Files

9491293cf5bce992dbbbc6d3544457e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddaa08ec4ae1b0eccc5bd12fd3bb8c20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

Sections

.text
Size: 46KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE