20d93aca9c4aaa9aa298e3e2d1f4b05e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20d93aca9c4aaa9aa298e3e2d1f4b05e_JaffaCakes118
Size

14KB
MD5

20d93aca9c4aaa9aa298e3e2d1f4b05e
SHA1

dfcab0c9433190e04c7aa31cabaf1aa33459c79d
SHA256

08a26ca73dabc45a4485bf09288c0f7f79f3694e0ccd32dbed291dd58941035c
SHA512

6e2952c56f224f8f97cea53cb8dc9c6f9c164115f0dc7c65b1ba0519c5a25e606c92324d50bb9072251f7052ce398b92b54b1c4ec52d046288fe335b54d78222
SSDEEP

192:HrGfX+wkFdmgqHmGJAPO2/M8F+76cGDkp4gepl0TTAGAy3:qkdmsaAWWM8GmYrwSTTf33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20d93aca9c4aaa9aa298e3e2d1f4b05e_JaffaCakes118

Files

20d93aca9c4aaa9aa298e3e2d1f4b05e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

eaf7c7d778b427cc143d8eb209c5f6e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
CreateProcessA
ExitProcess
FormatMessageA
GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetTempFileNameA
GetTempPathA
GetVersion
GetWindowsDirectoryA
LocalFree
MapViewOfFile
MoveFileExA
RtlMoveMemory
Sleep
UnmapViewOfFile
WriteFile
WritePrivateProfileStringA
lstrcatA

user32

MessageBoxA
wsprintfA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 1024B - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ