b26d486e0f0062ca1a99c921609e9c2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b26d486e0f0062ca1a99c921609e9c2c_JaffaCakes118
Size

24KB
MD5

b26d486e0f0062ca1a99c921609e9c2c
SHA1

0a8d16018f612a7b4950d53dad498702cfbbe320
SHA256

2d1db86d8f5905841981b44f703dfea302f709b5bb527db18a3c6d9adcaef01c
SHA512

0542c2ba86076259ada42bfb5d4815a0d060103c43c8f66947d273ba95eee486126b3db738f074662753cbff6a9251c587260fecfaba59ec0c591c7955d6727f
SSDEEP

384:aCxx5we+go0xge7ryemLmHkQU+Krv0TXucEzZEshzC6zQ8hLAjgnbBp:aCxUe+gHxrmeILQAsbuzlC6zSob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b26d486e0f0062ca1a99c921609e9c2c_JaffaCakes118

Files

b26d486e0f0062ca1a99c921609e9c2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddaa08ec4ae1b0eccc5bd12fd3bb8c20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

Sections

.text
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE