03e72de99a943bdeb7219418335239ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03e72de99a943bdeb7219418335239ab_JaffaCakes118
Size

7KB
MD5

03e72de99a943bdeb7219418335239ab
SHA1

cbab7681555937375451d84513d242c482f3c7cc
SHA256

1de36ca715e50f48b9bd696c5e055428e63a1f8ac731ab86409b512a89854825
SHA512

b5b7eab48fe9c1232efbb050ea6391d14c7775b7d11f2090e3bf602ea07ab3ebd97239b5355c5f7b9e0b36d2d8c231399f3e7285c2b1cadf9d94766e48c20f23
SSDEEP

96:L4+jYWvIybkHgBEFcLlyGMIOGmzopSnnsEOD0vAa5ZCyih2+qju:3mgnuGTM9G3Ys1Ddyih2+t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e72de99a943bdeb7219418335239ab_JaffaCakes118

Files

03e72de99a943bdeb7219418335239ab_JaffaCakes118
.exe windows:1 windows x86 arch:x86

89aa55fcb7984737a5962f01052b7f30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AnyPopup
CheckMenuItem
CheckMenuRadioItem
CloseWindow
CopyRect
CreateIcon
DragDetect
DrawEdge
EndPaint

kernel32

CloseHandle
ExitProcess
LoadLibraryA
CreateFileA

wininet

DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
ForceNexusLookupExW
FtpRemoveDirectoryA
GopherCreateLocatorA
HttpAddRequestHeadersA
IncrementUrlCacheHeaderData
InternetAutodial

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE