24d8e5fd9030fae4f628d8bce9ff52eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d8e5fd9030fae4f628d8bce9ff52eb_JaffaCakes118
Size

9KB
MD5

24d8e5fd9030fae4f628d8bce9ff52eb
SHA1

242b91658093738f64044652900b353f3df2675e
SHA256

dc03849ab74b2acaeb2efc2ce3a38800a1270a541663c4e6fe228554a6621888
SHA512

5a733229d28b5091b0d2d8e5ae1246c6f0f968fe9d7bcd479dbeab847e71bbeeb50087912b882b91a68ebcfaa7f4f30c1b69dce5837a5bfa8963ca4ab56b9525
SSDEEP

192:aaL/O71fo4Wu6xfSTOmGU6zMZe0aYgJbSNI+PP1oyn79:uUZSTOf0aYgF1+X1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d8e5fd9030fae4f628d8bce9ff52eb_JaffaCakes118

Files

24d8e5fd9030fae4f628d8bce9ff52eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4708e94f865f4bd2880ce7eb3501f03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_stricmp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
realloc

imagehlp

MakeSureDirectoryPathExists

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

kernel32

CreateFileA
WriteFile
CloseHandle
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapAlloc
GetFileSize
SetFilePointer
Sleep
GetModuleHandleA
GetStartupInfoA
ReadFile

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE