2231215c64cb87973ffe6b97654f4919_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2231215c64cb87973ffe6b97654f4919_JaffaCakes118
Size

12KB
MD5

2231215c64cb87973ffe6b97654f4919
SHA1

3150a85b901b5ec16437b4965149f448800e2770
SHA256

95845669819d0b225cd9b873b8e281074f4c38ae7c107bfee70ca59abca75236
SHA512

33283398c8c2142df17f6737b00ec9173bda8874530d0c52f662bc028793fd19f64fd192289f2a6a159129e65efa42362e2fe353981469bc3a88a9f2154a6a3b
SSDEEP

192:WHV0IggijUS3iv4y/bGD/u5FSyg5So3mTacUmqOAau3W8HglNoEyuh:yVFZLT/irpyg54aeqOAasHONj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2231215c64cb87973ffe6b97654f4919_JaffaCakes118

Files

2231215c64cb87973ffe6b97654f4919_JaffaCakes118
.exe windows:1 windows x86 arch:x86

8b8de558f04a990758560da24048e8d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

wininet

GetUrlCacheHeaderData
FindNextUrlCacheEntryA
FindNextUrlCacheEntryA
CreateUrlCacheContainerW

msvcrt

__toascii
__RTCastToVoid
__unDName
__badioinfo
__iscsymf
__argc
__crtLCMapStringA
__pioinfo
__unDNameEx

shell32

SHBindToParent
SHFormatDrive
DragQueryFileW
SHGetDataFromIDListA
SHGetPathFromIDListW
StrStrA
ExtractIconA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE