cf1b27121d4694444d6ba38c6a7dc3a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf1b27121d4694444d6ba38c6a7dc3a3_JaffaCakes118
Size

20KB
MD5

cf1b27121d4694444d6ba38c6a7dc3a3
SHA1

f27920e7247ae875ea2e3c44079d143bf07683ba
SHA256

86ac5988193be57ca6457ee33fe674a36d0773ec02f353f6ef0f8683839095e3
SHA512

64de1fe375285b01acbd6565512f89e12c383a9350cebeaf2358c5315969279b6432d39b14b5d8351dcb4d423efea9d35ccb5a4c1e91eaf1eb0698d6d73c2a39
SSDEEP

384:X/0P5GNvB20tMncgRZsntEIScjKyjSYDBa:f7vtMcdHYyju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf1b27121d4694444d6ba38c6a7dc3a3_JaffaCakes118

Files

cf1b27121d4694444d6ba38c6a7dc3a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff83c1a7e35c5a5753a805d71a17feca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
CloseHandle
WriteFile
CreateFileW
GlobalAlloc
Sleep
GetTickCount
ReadFile
GetFileSize
WinExec
GetFileAttributesW
GetLastError
CreateMutexW
GetStartupInfoA
GetModuleHandleA

user32

MessageBoxW
FindWindowW
wsprintfW
PostMessageW
FindWindowExW
ShowWindow
SetWindowTextW
SendMessageW

shell32

ShellExecuteW

iphlpapi

GetAdaptersInfo

ws2_32

inet_addr

wininet

InternetReadFile
InternetCloseHandle
InternetOpenW
InternetOpenUrlW

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
exit
setlocale
wcsncpy
wcscmp
memset
wcscat
mbstowcs
strlen
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
wcslen
wcscpy
wcsstr
printf
wcsncat
_wcslwr

Sections

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE