7042a6023da45057efd42cc8eb911250_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7042a6023da45057efd42cc8eb911250_JaffaCakes118
Size

9KB
MD5

7042a6023da45057efd42cc8eb911250
SHA1

bb2e91eb2321b37a1151183a44f43493fed446c5
SHA256

55f6446a3f07f8b9013a9974770701344514b77239324d11b96ae78efe2b2285
SHA512

256a91e59cb84959b61dc6ae8b52def427d9601fc3a6505422d723350f5818d79b1ba31b5021a3328fd037aa912338732149eb80889e6486200fe5d0a90d8b32
SSDEEP

192:Gdzvk21ggVzBZe0WuxoKKOOLR3Ag65rPP1oyn7pY/RI3o:GWt0WubZqQd5rX1VeJI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7042a6023da45057efd42cc8eb911250_JaffaCakes118

Files

7042a6023da45057efd42cc8eb911250_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1043bb2cf7f2cfa17a792430c3239b5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_stricmp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strstr
strrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
free
realloc

imagehlp

MakeSureDirectoryPathExists

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

kernel32

GetStartupInfoA
lstrcpyA
Sleep
WriteFile
CreateFileA
CloseHandle
SetFilePointer
GetFileSize
ReadFile
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapAlloc
WaitForSingleObject
CreateThread
lstrlenA
GetModuleHandleA
CreateProcessA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE