16d7020787a2327754a0fd5fb9888652_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16d7020787a2327754a0fd5fb9888652_JaffaCakes118
Size

9KB
MD5

16d7020787a2327754a0fd5fb9888652
SHA1

c9d036f59979f89c5ff682685ec589d8463ef0b1
SHA256

fb1766ccc4c6445241798a3de9d4f3b737b8a8dea7b376384e144f4f7ad026a2
SHA512

5cc31f1c2a9e3f6f6c30c3ee06648ced13be9a2ca815c9d425ebc92fb7f7e7e674ac50635c711c2d513164b88fc5a51a4616b5603fbc006bd8eb9f11dad4f7a2
SSDEEP

192:tZyANFJzw/Y44kDXHapyr9SrSD1u2zx3RoPBm0R:tZHNAY44AKO9SrSD1u2zx3R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16d7020787a2327754a0fd5fb9888652_JaffaCakes118

Files

16d7020787a2327754a0fd5fb9888652_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7434b940546a206cea127382f072d5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

memset
strlen
strcpy
strcat

user32

wsprintfA
wvsprintfA

wininet

DeleteUrlCacheEntryA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

urlmon

URLDownloadToFileA

kernel32

GetModuleHandleA
GetCommandLineA
ExitProcess
HeapCreate
GetSystemDirectoryA
GetEnvironmentVariableA
GetCurrentDirectoryA
GetModuleFileNameA
HeapDestroy
HeapAlloc
HeapFree
Sleep
WaitForSingleObject

shell32

ShellExecuteExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.flat
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE