f30efe28b91be6fce8a20ae7f0614c1f_JaffaCakes118 | Triage

Sharing

General

Target

f30efe28b91be6fce8a20ae7f0614c1f_JaffaCakes118
Size

77KB
MD5

f30efe28b91be6fce8a20ae7f0614c1f
SHA1

458ac22e7521d5841359b7752d025ceb3b1b6ee4
SHA256

a646752bdb9c3f66cdd09fd0190e5b795bbccff17dc779a72cfb868a7ecffa6a
SHA512

cc2e55710ce4ef381727e228157c70fb22110625a9a5827e2ac83ab42089911f3cd759174eda454dc3719cc453712f4932ac393bf3f06a702330a46402a8d80f
SSDEEP

1536:3UlOONcO1dQisr6URXNN+0XH9oLCylTra8MO7hSLai0:3UTNTd7sOiXNYeUxa837h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f30efe28b91be6fce8a20ae7f0614c1f_JaffaCakes118

Files

f30efe28b91be6fce8a20ae7f0614c1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b51904180dbc4099bf824bcb96f9155

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GopherFindFirstFileA
GopherOpenFileW
FtpGetFileW
FreeUrlCacheSpaceA
HttpQueryInfoA

user32

DrawIcon
DestroyCaret
FillRect
GetActiveWindow
GetMonitorInfoW
GetShellWindow

advapi32

ReportEventW
RegFlushKey
DecryptFileW
ReadEventLogW
OpenThreadToken

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE