faed8c63605b095d68578942d7e26c70_JaffaCakes118 | Triage

Sharing

General

Target

faed8c63605b095d68578942d7e26c70_JaffaCakes118
Size

10KB
MD5

faed8c63605b095d68578942d7e26c70
SHA1

96405b3c85312a7b352b180fb1d71c3836d58265
SHA256

96b0c5dc489741a9aaa4421920dcbd90e2d130e4ab2bb0af07bdb63af23d4f5e
SHA512

f917fb29babb9ff5c214b8e7ffc6365779427ec683c86bbdba4471f2a918bc1fbb993ca96cc4f5ff7d7871a43e3e70cb3151f155ba1f42969aa248d8e59e21ce
SSDEEP

96:ZRm3QC3oSXGdTfwIqYwnumr4CX/Hx/HfpV5MIfyJQUqY6wudnBB:XiQC3oSWdHwnzr9V/bfi9utBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faed8c63605b095d68578942d7e26c70_JaffaCakes118

Files

faed8c63605b095d68578942d7e26c70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8154af1ad3da1ac3c8e822c46a63f919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
GetProcAddress
LoadLibraryA

user32

wsprintfW

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ