cf77cfcc40243d671ee43a29d15e08cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf77cfcc40243d671ee43a29d15e08cd_JaffaCakes118
Size

18KB
MD5

cf77cfcc40243d671ee43a29d15e08cd
SHA1

419795e92784b27b26dc5417ca991e227a66e3b4
SHA256

f5a1638157bfbb718ebed343539e21aacd69f3c44e983e9a5be165cfb50d2ebb
SHA512

496c5789a5223beeb9e9c92858796f78c9fa4df6f4f469b2158d0d1258f44321509fe569d604b5d365e95bdcf27633b7a550fa36687d63e6086f533c61216e31
SSDEEP

384:FwV/GotQoTGCcE7rfyQ6bHL0WnPYPVMWHvEJ2JeF2pP1MYFj:4/vHTGCcE7ryp/0OYPVMaEJ2DF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf77cfcc40243d671ee43a29d15e08cd_JaffaCakes118

Files

cf77cfcc40243d671ee43a29d15e08cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c66ef01892f32d422fdc098d1f2ab04f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DispatchMessageA

wsock32

accept

advapi32

GetSidIdentifierAuthority

shell32

SHGetSpecialFolderPathA

ole32

OleUninitialize

rasapi32

RasGetEntryDialParamsA

oleaut32

SafeArrayCreateVector

Sections

.text
Size: 15KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE