4be34d3431894f71fa0372b9894e31aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4be34d3431894f71fa0372b9894e31aa_JaffaCakes118
Size

7KB
MD5

4be34d3431894f71fa0372b9894e31aa
SHA1

cfcc760cf4e1ab7ed0cd3fec29b8b6443fa47c15
SHA256

cb448990df21cb19a9ec113e8c3205e0a658ee7ac7fda1e6ce69fae886707d1a
SHA512

082825e86ff44f088de03e6a4b7ae66d39cc207577773811488944803cf7de544e9c037a79298078ae202f8dc4a8c1dc326afbda68ed154165bda51550fafaa1
SSDEEP

96:8EH9CImarg/WWWWWWWWWWWWWWWWWWWWWWWWWr4Dha1QNwDwSnOq1luurvSQMxY2W:8SCIPgvh1NqnZlTraQMy2ZvABxG9p0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4be34d3431894f71fa0372b9894e31aa_JaffaCakes118

Files

4be34d3431894f71fa0372b9894e31aa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

711afba981eaae660a83930b3da22538

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateFileA
GetProcAddress

wininet

InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ