8abff333b92af2add6cf1512af67f2f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8abff333b92af2add6cf1512af67f2f8_JaffaCakes118
Size

9KB
MD5

8abff333b92af2add6cf1512af67f2f8
SHA1

37b2f288546ac712b1b56f12ea7b680e673ab269
SHA256

baf62759df12d1503ea5211727959fc40b08ca4347f99cb60429c35ed1f63ff7
SHA512

5234641395379c68a0854c5d5d7503a6511692591884b487ba4edaac2779ab009adb099b75964589c72f5e1cbf70fc0e2cb0cb910bb4df2e94434aa13d7996d4
SSDEEP

192:Gdzvk21ggVzBZe0WuxoKKOOLR3Ag65rPP1oyn7kwy8RIr:GWt0WubZqQd5rX1Vr3I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8abff333b92af2add6cf1512af67f2f8_JaffaCakes118

Files

8abff333b92af2add6cf1512af67f2f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1043bb2cf7f2cfa17a792430c3239b5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_stricmp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strstr
strrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
free
realloc

imagehlp

MakeSureDirectoryPathExists

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

kernel32

GetStartupInfoA
lstrcpyA
Sleep
WriteFile
CreateFileA
CloseHandle
SetFilePointer
GetFileSize
ReadFile
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapAlloc
WaitForSingleObject
CreateThread
lstrlenA
GetModuleHandleA
CreateProcessA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE