085d0f097cd3c239668e3c6226376ae4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

085d0f097cd3c239668e3c6226376ae4_JaffaCakes118
Size

90KB
MD5

085d0f097cd3c239668e3c6226376ae4
SHA1

b29eed913b60447c630f8147c1ee687e22f0f527
SHA256

caa1a616a8a74bec0ae2cb60aaf23e923fb30d9e3b783ff31ce0b881573973ea
SHA512

33fe3aa7011d240ce726ad280d05dff0c3837d3177ea4b1041406dfe30e8f4c17de0425c0251793c6c28c4698645b6a7266f9389dd4bdccec0329bb3a9708d46
SSDEEP

1536:TaQaDGK6FJ/fc0U3X5ItM5CuQx+KVG/izzHKpmr4mqF2j1KBMZruMNwdV:TeDb67/q3nCl3c/izzHKAragj1aMZrpy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085d0f097cd3c239668e3c6226376ae4_JaffaCakes118

Files

085d0f097cd3c239668e3c6226376ae4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE