0eeed2db0261ea950244ac5cd1438400_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eeed2db0261ea950244ac5cd1438400_JaffaCakes118
Size

26KB
MD5

0eeed2db0261ea950244ac5cd1438400
SHA1

959b94b12fe092a81d417971d61285ce8c30ea3a
SHA256

4408c85663214a51fe858a8c0c274474f2255d545ff09d58c4fb11fc5c87e761
SHA512

577b872d6449044830ef25c19349528a6955bffb054d79c8f550f7699cb8e1234b3a0d9ab02af23c6e1c101c14efded47b49f118a8b39518f9dd929c40478ae7
SSDEEP

96:KfC9FKx1U9TkkEG4yVClJStBKPd1tqbmB14qQx/nLLjy6dD9cKyQVmhcKcGruhb:Kfb7GlbK/tYSCLy2x/yQVmhcKcGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eeed2db0261ea950244ac5cd1438400_JaffaCakes118

Files

0eeed2db0261ea950244ac5cd1438400_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11c11a177bff556e568d9d689af8ab6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
GetShortPathNameA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
CloseHandle
HeapFree
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
GetLastError
GetCommandLineA
lstrcmpiA
GetEnvironmentVariableA
HeapAlloc
CreateMutexA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey

rasapi32

RasEnumDevicesA

shell32

ShellExecuteA

user32

SendMessageA
ShowWindow
EnumWindows
MoveWindow
GetWindowTextA
MessageBoxA
wsprintfA

wininet

DeleteUrlCacheEntryA
FindCloseUrlCache
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetQueryDataAvailable
InternetReadFile

Sections

code
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE