153f1005611254f9baa12113704b89bb_JaffaCakes118 | Triage

Sharing

General

Target

153f1005611254f9baa12113704b89bb_JaffaCakes118
Size

21KB
MD5

153f1005611254f9baa12113704b89bb
SHA1

110f2f4a2cfe4c2a1bb42d4b1ae17944f62e0f94
SHA256

35593f95ec0bfe85afbeee3b0a79778e15de67a35a63fe3013c9d49fbb9c88b5
SHA512

21e7c985780415f1ba907a64a094e8128bb98e0c25653a66ea2ff8788be67344307a19e0234b4ef9cde1d2e18d091899975170784ff30c5d92295ec138892278
SSDEEP

384:SFakaDgVHC9WZJJXQYg3UnAi9D0oLDOYJU0XGw9Lo:SFaraHC6JAYNAytHRaIGw9Lo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
153f1005611254f9baa12113704b89bb_JaffaCakes118

Files

153f1005611254f9baa12113704b89bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39f43a83cde8674b9fe64a9cfdd03553

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strncmp
strstr
strchr
atoi
strncpy
RtlRandom
sprintf
memset
_chkstk

kernel32

GetLastError
GetSystemTime
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
CreateFileA
SetFilePointer
SystemTimeToFileTime
GetCurrentProcess
VirtualFree
GetWindowsDirectoryA
WriteFile
Sleep
TerminateProcess
ReadFile
GetSystemDirectoryA
GetTimeZoneInformation
SetCurrentDirectoryA
VirtualAlloc
GetProcAddress

wininet

InternetConnectA
InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE