fae5afb3ee7b30a87064f77849bcdb47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fae5afb3ee7b30a87064f77849bcdb47_JaffaCakes118
Size

7KB
MD5

fae5afb3ee7b30a87064f77849bcdb47
SHA1

62b81a0ba50530276db14ed12317aae53e7fa0a6
SHA256

90adbf6b167134af391a4dde6eeb12d6771fd629c1158ada336089f653feb894
SHA512

f4153856213dd742b077a56eb114d401416c67ad2c351688c2cce543518663228369cf397327f2cc91dabd937546e9f111eb852ecadbc90a3463b22a8edaf3e6
SSDEEP

96:yawMki8s883BvBE1G8dqMkzlJbmUutKFjyawGVn5h8yRfT+KMj:dkYfE1hboHbmUsKFxN5h8yRT+K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fae5afb3ee7b30a87064f77849bcdb47_JaffaCakes118

Files

fae5afb3ee7b30a87064f77849bcdb47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd27e63db37f978df84faa0b6742a01c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
ExitProcess
GetModuleHandleA
HeapAlloc
GetProcessHeap
CloseHandle
GetCurrentProcessId
FreeLibrary
CreateFileA
GetWindowsDirectoryA
GetVersion
LoadLibraryA
HeapFree

user32

GetClassNameA
GetGUIThreadInfo
RegisterClassA
GetForegroundWindow
GetMessageA
CreateWindowExA
DefWindowProcA
PostQuitMessage
KillTimer
SendMessageTimeoutA
DispatchMessageA
TranslateMessage
GetWindowTextA
RegisterWindowMessageA
SetTimer
GetWindowThreadProcessId

ole32

CoInitialize
CoUninitialize

oleaut32

VariantClear
SysStringLen
VariantInit

wininet

InternetConnectA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetOpenA

shlwapi

PathAppendA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 349B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE