1a1c7f7c3880e03ae8f34ee4a7aa0fe5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a1c7f7c3880e03ae8f34ee4a7aa0fe5_JaffaCakes118
Size

11KB
MD5

1a1c7f7c3880e03ae8f34ee4a7aa0fe5
SHA1

d35ceee920179f92ed85e3a78e1e66d5a1d991fe
SHA256

c8f4d83e832e62fda26c89f70998cb624005f638dd52c17b7c0f02e88a4b27b9
SHA512

d992cc51ed18bc01dd9c74c90d6521fab86a1b96035b6c60066847a773ee41d961323c40946be468f91fc2b06b97b4e3c37f52614e09563e7c0417233e864a57
SSDEEP

192:Hf0bQoNTPTF7E3rvSqLZ8z+gWw2HlU1OdAaIleLgIumGE8lruEQMlK29Y2GuRG1r:/6TFIbvSq++Lw2iha+ec3xurMzG1Mjsd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a1c7f7c3880e03ae8f34ee4a7aa0fe5_JaffaCakes118

Files

1a1c7f7c3880e03ae8f34ee4a7aa0fe5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

c9a83ad0ab9db6b538979667054268b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

CsrGetProcessId
DbgUiStopDebugging
LdrEnumResources
LdrFindResource_U

urlmon

GetClassFileOrMime
GetClassURL
IsJITInProgress
RevokeFormatEnumerator
UrlMkBuildVersion
DllCanUnloadNow

user32

CloseClipboard
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

Sections

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE