080e3169ad8e764acee29da7bf2684e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

080e3169ad8e764acee29da7bf2684e2_JaffaCakes118
Size

6KB
MD5

080e3169ad8e764acee29da7bf2684e2
SHA1

f18ad7b5606b7feddb1a21ca3fa4ee4d2953bcdb
SHA256

3a90653d20fb4ad2ecc8f1b4dee9022e0214b1bc85a405d952e0c4f626958605
SHA512

b00eaa42482109e288e81fc7414c1ce3ad23a0ed6ac3046314d684660e792ae6f916cc780d042c858d9bfc109e1e2ba8848b51595f0340dd66426bed832db76c
SSDEEP

96:ehDm/o3nSzmFtgG+md+y/2WbGdziMOVdH/o:elm/oumDgGYy/20Gdzi55/o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080e3169ad8e764acee29da7bf2684e2_JaffaCakes118

Files

080e3169ad8e764acee29da7bf2684e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53e0a85b0875641baef35a61be29ff38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
ispunct
__p__commode
_c_exit
__set_app_type
_except_handler3
_controlfp
isspace
isupper
isxdigit
sprintf
time
atoi
div
isalnum
isalpha
isgraph
isdigit
islower
__p__fmode
isprint
_adjust_fdiv
ceil

kernel32

GetStartupInfoA
GetTickCount
SleepEx
GetLocalTime

user32

wsprintfA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shlwapi

SHSetValueA
SHGetValueA

netapi32

Netbios

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE