19bdb9ae7ca3f23bffe17b586584ad87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19bdb9ae7ca3f23bffe17b586584ad87_JaffaCakes118
Size

21KB
MD5

19bdb9ae7ca3f23bffe17b586584ad87
SHA1

3e00293914183b318eb8decc60c7b45ca315ce2b
SHA256

899d6df54c9a85b51d24a092d7d99813379e0e7d22b5c781cd86143d67820e2c
SHA512

0252660911c2b96d4d1b635d3927f088026b91f2b3741138be94617d4648f0daaa3032371789de60541f6d0162a16865ab2c312db97dcec5c4b90d5b6fbd6c00
SSDEEP

384:GFakaDgVHC9WZJJXQYg3UnAi9D0odDOYJU0Xvw9Lo:GFaraHC6JAYNAytxRaIvw9Lo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19bdb9ae7ca3f23bffe17b586584ad87_JaffaCakes118

Files

19bdb9ae7ca3f23bffe17b586584ad87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39f43a83cde8674b9fe64a9cfdd03553

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strncmp
strstr
strchr
atoi
strncpy
RtlRandom
sprintf
memset
_chkstk

kernel32

GetLastError
GetSystemTime
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
CreateFileA
SetFilePointer
SystemTimeToFileTime
GetCurrentProcess
VirtualFree
GetWindowsDirectoryA
WriteFile
Sleep
TerminateProcess
ReadFile
GetSystemDirectoryA
GetTimeZoneInformation
SetCurrentDirectoryA
VirtualAlloc
GetProcAddress

wininet

InternetConnectA
InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE