JaffaCakes118_4040717100e4816bddbf9e6002a65410 | Triage

Sharing

General

Target

JaffaCakes118_4040717100e4816bddbf9e6002a65410
Size

97KB
MD5

4040717100e4816bddbf9e6002a65410
SHA1

fa2d37ce539914f50d66bc4c7611771b3ca3cf42
SHA256

ac043155eacc2ca0b55e081117c6e842f71edd174ad2879d13f9a5406c64031d
SHA512

55d80bf42eb9f2e7310ba00bc686743161de803fd1c0c8acd119a93ecff4df05ea6f4f03a7d2b9df0c5f2b2d3f24d0259e586084c070cee8ca427b6ddbd1dd05
SSDEEP

3072:BIl/Kafu/B6qbK61YA2eRVK56BYZhUqSsx4q:KYiu3OA2eLK55vURu4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4040717100e4816bddbf9e6002a65410

Files

JaffaCakes118_4040717100e4816bddbf9e6002a65410
.exe windows:5 windows x86 arch:x86

1351423554fed03b1480b6446ede6a7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsFileSpecW
UrlIsOpaqueW
PathIsURLW
UrlIsOpaqueA
StrStrA
UrlGetPartA
StrCSpnA
StrCmpIW
PathIsRootA
StrChrIW
PathGetDriveNumberA
StrToIntW

user32

IsMenu
LoadBitmapA
GetActiveWindow
GetProcessWindowStation
GetClassLongA
IsCharLowerA

kernel32

lstrcatA

Exports

Exports

?FormFactor@@YGXUverifyEw@CA7
?FormWeight@@YGXUverifyEw@CA7

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.one
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.void
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zero
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ