f61fe0078c68d300b3a395ccc08dfee7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f61fe0078c68d300b3a395ccc08dfee7_JaffaCakes118
Size

10KB
MD5

f61fe0078c68d300b3a395ccc08dfee7
SHA1

b9462422a7e5f50c405e25d728e4cd7a1e636a13
SHA256

ece3751bdabd47999bcea68e3bc495e8e25e415bcb0f9475780b4a94ae8a628b
SHA512

225a9405b77a235a47b52a800e97601e5df0a3aba3b95c6ab4219f9efddfab874aab1ceb47ce34db2dd674e663871909ba29b07423b6e0b8a833e7d7bdd1fe61
SSDEEP

96:QQyiNCz6Evz6ExRE957Uhe8+W90ElIbjbeM209yWlNJX81lNt8DY259zmoPJGDZi:9ZtE+ExyXIhR+W9yyaNJX7F5LGAwG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f61fe0078c68d300b3a395ccc08dfee7_JaffaCakes118

Files

f61fe0078c68d300b3a395ccc08dfee7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e36d3b8ba9ab0423be77597ea15d665

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
SetErrorMode
GetCommandLineA
CreateMutexA
GetLastError
HeapFree
CreateThread
HeapAlloc
ExitProcess
WriteFile
CloseHandle
CreateFileA
lstrlenA
SetFileTime
SetFilePointer
CopyFileA
GetFileTime
lstrcatA
Sleep
FreeLibrary
DeleteFileA
MoveFileExA
GetWindowsDirectoryA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FindFirstFileA
FindNextFileA
FindClose
ReadFile
GetTickCount
lstrcpyA
GetComputerNameA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shell32

ShellExecuteA

ws2_32

setsockopt
htons
send
inet_ntoa
ntohl
closesocket
recv
connect
htonl
bind
socket
WSAStartup

user32

wsprintfA

advapi32

ControlService
ChangeServiceConfigA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

shlwapi

SHSetValueA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE