aef17851e401e1b37642a2cbb8d67d2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aef17851e401e1b37642a2cbb8d67d2d_JaffaCakes118
Size

77KB
MD5

aef17851e401e1b37642a2cbb8d67d2d
SHA1

ea9da2383984759f93cdacaa3b0a9f44041dfa89
SHA256

d55de03e1144e1ebc4dee8c9ab72ca738df5d98797b6d446bfb38133268e2f37
SHA512

de4b08cd952985f1741492ec1490be389dc6c5e6fd56faf7f7b0314ee0db18fb8bfb362ba7f3d5ccab2701ffbadd325dc731c614091aa020084abf55ea39cb5b
SSDEEP

1536:aru3MQYBZgUr9fkuujRJ3C4XpKhpBTS6Q/ECegY3ccaMLaPkh3hM:tkBZgQ9fkrNzpKHBTS6KYxh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aef17851e401e1b37642a2cbb8d67d2d_JaffaCakes118

Files

aef17851e401e1b37642a2cbb8d67d2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3238f0ac1881f3c48a9557db59c862b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIcon
DestroyCaret
FillRect
GetActiveWindow
GetMonitorInfoW
GetShellWindow

advapi32

ReportEventW
RegFlushKey
DecryptFileW
ReadEventLogW
OpenThreadToken

wininet

FtpGetFileW
GopherFindFirstFileA
GopherOpenFileW
FreeUrlCacheSpaceA
HttpQueryInfoA

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE