0fd42cf953e28d68ec2af06ebbb86191_JaffaCakes118 | Triage

Sharing

General

Target

0fd42cf953e28d68ec2af06ebbb86191_JaffaCakes118
Size

24KB
MD5

0fd42cf953e28d68ec2af06ebbb86191
SHA1

5bc569fe5c72c1212a8f3f052590780bb1ca0f85
SHA256

9f2b89ef855fc16f2f57ab49a4bb35b2809e54dfa06f6b505bbc47ef1da07f72
SHA512

24449e0e9b3522a2742a0c9a7ef8e1cac089b7e6329a4f1784dd5bf50fb712eb13d94034727bda06a2d6887e0c0ea175922eac1ba7cb45d7d1873aadf97850ee
SSDEEP

192:shBdkWw6ImXT1dL2Qngafd0hvTG6MLMtHsP1oya2lCjEULKQ9Z1:WB5w0zf298MtS11lCjL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd42cf953e28d68ec2af06ebbb86191_JaffaCakes118

Files

0fd42cf953e28d68ec2af06ebbb86191_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab55a14b1ed48d4cdae76fa084c07a9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetLongPathNameA
CreateProcessA
CreateFileA
WriteFile
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyA

msvcrt

srand
time
isalpha
isalnum
div
ceil
atoi
rand
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
_except_handler3
_itoa

wininet

InternetQueryDataAvailable
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ