f6aa074b00ec9b8b519d8ba8b4642e5f_JaffaCakes118 | Triage

Sharing

General

Target

f6aa074b00ec9b8b519d8ba8b4642e5f_JaffaCakes118
Size

13KB
MD5

f6aa074b00ec9b8b519d8ba8b4642e5f
SHA1

bad50c53594fcaa9406c478a3d3464cc251267a0
SHA256

4753a69e9fc42dfa3e0a5ac94eb9a0eabd5925472b8be69b57b0f89a2cd6b5a0
SHA512

97478fb8c9340e98953400e5896a027a3d6547744a4603f58ce246d6b7369180813e5bc14b683c97d0b230bdfa43ff1ab1a4e276bce7d12e20c4dc6e5b2ceeb9
SSDEEP

96:bp4LI8EN54nPaHLY3PlGLZL6mbifcVPtboy:l4LI8EbDHLiJmbKcVP1oy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6aa074b00ec9b8b519d8ba8b4642e5f_JaffaCakes118

Files

f6aa074b00ec9b8b519d8ba8b4642e5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1fddecdbff58e642c1ef94415171639d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessA
GetStartupInfoA
Sleep
GetTickCount
GetWindowsDirectoryA
SetEvent
WaitForMultipleObjects
WaitForSingleObject
CreateEventA
DeleteFileA
ExpandEnvironmentStringsA
SetFileAttributesA
CreateDirectoryA
GetLastError
CreateMutexA
GetModuleHandleA

user32

LoadCursorA
SetSystemCursor
CopyIcon

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

msvcrt

_XcptFilter
__set_app_type
__p__fmode
_controlfp
__p__commode
sprintf
_except_handler3
fprintf
_beginthreadex
fclose
fscanf
fopen
_exit
_adjust_fdiv
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE