f9bd28587009317510b59f12210ec0cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9bd28587009317510b59f12210ec0cf_JaffaCakes118
Size

108KB
MD5

f9bd28587009317510b59f12210ec0cf
SHA1

91b379a05fcf647212ed653fc6b6c514eb4ca8a7
SHA256

12779da751aaaf11085c85ac75c35d479f7e5a4729aefb2e582c8b1a0883fd34
SHA512

3b2b9548e4a9bb2b05bb3f08680ab389e539eb3bbb2f8c70f7cc77daf8b8b69ba8d724602e296bdaeea4f10e76fa2dc6e3e807f142d7574ee38eaff37c065c44
SSDEEP

3072:epaUUkmgl5fvt52ywXOBhQ64JQ0ICUJoyyZXkCz+wtc:eFUkn/vjfwYhQ64J7ICfRHzRt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9bd28587009317510b59f12210ec0cf_JaffaCakes118

Files

f9bd28587009317510b59f12210ec0cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ab944c3b7b9d49f49d303b57f61fc88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRect
MessageBeep
MessageBoxA
CallMsgFilterA

urlmon

HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLDownloadToFileA
CoInternetCreateSecurityManager
URLOpenStreamA

wininet

InternetOpenA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE