d2267b025812448aca8219286d1d0be1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2267b025812448aca8219286d1d0be1_JaffaCakes118
Size

18KB
MD5

d2267b025812448aca8219286d1d0be1
SHA1

0f8d2a0c766472fbbfc96e422cc8b4d7371d9344
SHA256

92d7e36abb63e8eb83c3679293774d635c815cc6d0cd3cf26fcc7fb382f0b1df
SHA512

ec1247ee896f79e0bd6126f11b2fb244dcc6327320ca1da38ef1c0275c58369e2c1ddb0ae9f5682b5a632621e94d819f54c7f02f11bddcb7882a8305499f8758
SSDEEP

384:DB9sOCV4+ibtm6WdYduMYc81YSXLmE+wAK5Q+Iig7:DBk+tm6WAqc81YjXF2Q+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2267b025812448aca8219286d1d0be1_JaffaCakes118

Files

d2267b025812448aca8219286d1d0be1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a2e244aa2bd9ae7afc5adc86c339c03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

FaultInIEFeature
GetClassFileOrMime
CoInternetParseUrl
ReleaseBindInfo
URLOpenStreamA

comctl32

DrawInsert
ImageList_DragEnter
ImageList_Remove

user32

CreateDialogParamA
CreateWindowExA
MessageBoxA
MessageBeep
DestroyWindow

kernel32

BackupRead
DuplicateHandle
CommConfigDialogW
CancelIo
EnumTimeFormatsW
ExitProcess

msvcrt

strcmp
printf
strstr
strlen
strcpy

Sections

.text
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 137KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE