ed32953108fc529260892cb2a1947bf8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed32953108fc529260892cb2a1947bf8_JaffaCakes118
Size

8KB
MD5

ed32953108fc529260892cb2a1947bf8
SHA1

7f82bc76af5ec2f3689e084001f0edee47a85ef2
SHA256

1965ec235005de1a684f240d86a8953faeb5399eb34e34c78fe58754bfe96406
SHA512

ca11cd2966cf6fafc054c9f8619aff769b0d6e73c51d15ef88ed86946a29662d4e5dfdd779d5b6891434d7ceab59f73fe2bf9379c4ba57d6334f5dc635f45451
SSDEEP

96:ZdrgAb0O3YXmWyFuZcBEsD/ry7CkRh8I8UiuEu8fuX36n+:ZdrgmXI2WounsDMLL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed32953108fc529260892cb2a1947bf8_JaffaCakes118

Files

ed32953108fc529260892cb2a1947bf8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2136cd38132b91bef379f135ba8121db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA

kernel32

GetCommandLineA
GetModuleHandleA
RtlUnwind
Sleep

crtdll

__GetMainArgs
exit
raise
signal
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 252B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 568B - Virtual size: 568B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE