ed765042b6c7c35f70435e46b2cd5ada_JaffaCakes118 | Triage

Sharing

General

Target

ed765042b6c7c35f70435e46b2cd5ada_JaffaCakes118
Size

14KB
MD5

ed765042b6c7c35f70435e46b2cd5ada
SHA1

5291cc87f219f6ee9ca3135fe9cf7708987f78fd
SHA256

794de4c76ca2f877298d7d0e80e4e8039d8d5e77a9f035fdc5bcee7ebfde6754
SHA512

3388076f991b7bd1ac243a2d774c03798e979c62bcfb2dafac961268b45a3dfd14086acc685f93796db1b6478fb6ea5f12a4d7437030183668cdd7d965989fa9
SSDEEP

96:eApfXpupKx9bheY0eb92lkLDE1VF0sdoIH9dLAPqeAwXXKHvhcKX2ab:eAjBK1qLo1U4ddMhnevhcKX2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed765042b6c7c35f70435e46b2cd5ada_JaffaCakes118

Files

ed765042b6c7c35f70435e46b2cd5ada_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da346a3e4a9e445898d3fc3e527d8a4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
lstrcmpiA
CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
GetShortPathNameA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapFree
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
GetLastError
GetCommandLineA
CreateMutexA

shell32

ShellExecuteA

user32

MessageBoxA
wsprintfA

wininet

DeleteUrlCacheEntryA
FindCloseUrlCache
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetQueryDataAvailable
InternetReadFile

Sections

code
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE