f82cc26c852e86f56fdd68f67d553027_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f82cc26c852e86f56fdd68f67d553027_JaffaCakes118
Size

10KB
MD5

f82cc26c852e86f56fdd68f67d553027
SHA1

f3f553e8eb1af88abb3e004ccf9906ee2f3e9292
SHA256

57ed386ba32440d1bea209169cdd8a6b3ce30fa01ed1b88bdd65386f6c40e4bc
SHA512

c9af64fed0d4865d734a7702569a847d1f659436fac693843aa0e982c733f06079bb721502665e112e18501d7bbcb24af8d7c67c562c03e8fc08b3d529562220
SSDEEP

192:aadArBn1Oc7eqM7gim3FhQLTVgjUZzeOGfP1oyn7:Y5M8dWTWwZzeOGn1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f82cc26c852e86f56fdd68f67d553027_JaffaCakes118

Files

f82cc26c852e86f56fdd68f67d553027_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef66613f9f66059b737e48fb08e27320

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_stricmp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
free
realloc

imagehlp

MakeSureDirectoryPathExists

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

kernel32

WriteFile
CloseHandle
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
Sleep
VirtualAlloc
GetProcessHeap
HeapAlloc
ReadFile
GetFileSize
SetFilePointer
GetModuleHandleA
GetStartupInfoA
CreateFileA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE