be457863130863abf2476458a324b060_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be457863130863abf2476458a324b060_JaffaCakes118
Size

888KB
MD5

be457863130863abf2476458a324b060
SHA1

a4958091b7bc75c3aa51c0bfb653f38d506dd330
SHA256

47860ffc4f730a0e46f72aaf1053c68e256ad4a212177da8196ffdab01bed764
SHA512

585d96b8dbfd0d5cb9f3d65c18a0212999453be9955e637a197ebed338b2542e4dd2b1a6caab0c27fbb1da1e4d8e0af164e3338edd287983aca8ab2145f0aa36
SSDEEP

12288:MKiAdwmjeFL3C5uCy1QU4IsCRPOsBMCqtOyR5tk+LGwcyXKJ1YxrUnA0v9MTKO:MKiAdNqrC5sgsBAFTrXBrL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be457863130863abf2476458a324b060_JaffaCakes118

Files

be457863130863abf2476458a324b060_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b187e5895b0a431bfe98208adc4c5f29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW

wininet

InternetSetOptionW

msvcrt

_XcptFilter
exit
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_exit

comdlg32

PageSetupDlgW
PrintDlgExW
ReplaceTextW
GetFileTitleW

kernel32

GetProcAddress
GetLocaleInfoW
MultiByteToWideChar
GetCPInfo
GetACP
LoadLibraryExW
MulDiv
CloseHandle
SetEndOfFile
GetFileSize
GetLastError
ExitProcess
VirtualAlloc
GetStartupInfoA
GetModuleHandleA

secur32

InitializeSecurityContextW

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.n77s0u
Size: 825KB - Virtual size: 825KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ