04dcc80161d54dc06504ce03ee36cc22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04dcc80161d54dc06504ce03ee36cc22_JaffaCakes118
Size

4KB
MD5

04dcc80161d54dc06504ce03ee36cc22
SHA1

a8126bae371c3d428150261705e7fe1fbd57b129
SHA256

07ee11cd7bc96055f193096294e8cc9ee5f8e9b328f94b9bce724d038571ec7d
SHA512

8688c98a6253918a0f208a36f8300412d1948fa7e067051429553216ad181d2fe4c10135df9d2070cbd92537f731e5c0badf11a92cd21e5099a6e7c8c46b2fe3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04dcc80161d54dc06504ce03ee36cc22_JaffaCakes118

Files

04dcc80161d54dc06504ce03ee36cc22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3aeb02ee6a0c7b74d6050bc0d3363689

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

user32

wsprintfA

kernel32

GetModuleFileNameA
GetTempPathA
lstrlenA
lstrcpyA
lstrcatA
WriteFile
CloseHandle
CreateFileA
CreateThread
ExitProcess
GetSystemDirectoryA
GetWindowsDirectoryA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE