2327cf46a648f4aec32dfdc03e7a0474_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2327cf46a648f4aec32dfdc03e7a0474_JaffaCakes118
Size

130KB
MD5

2327cf46a648f4aec32dfdc03e7a0474
SHA1

a9e8eb600b439754cf06163e1eb687d1b5f6f286
SHA256

8162aa5c044bd7d1945117dcaf5f66a439953e1c33a744daedcc61042ff0ccb2
SHA512

a60c107dbb86d021de00f40e8c7219491286d01d2bdcb0767d879fe4915af8490c0d688a63213bd743347ff32a63942c6a66900d88774e3d0e62450f7783a2ba
SSDEEP

3072:nH+RXidOA03yqBE/hQE/NeOww6Ekj6p5BEGxLb247N5:6jAWkZDN6EkOp5BE+24J5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2327cf46a648f4aec32dfdc03e7a0474_JaffaCakes118

Files

2327cf46a648f4aec32dfdc03e7a0474_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8733fc365ca6e6a7205c0433d1d376e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

CreateUrlCacheEntryA
DeleteUrlCacheContainerA
FindCloseUrlCache
ForceNexusLookup
FreeUrlCacheSpaceW
FtpGetFileA
FtpPutFileW

msvcrt

printf
malloc
free
_CItan
__RTtypeid
___lc_handle_func

kernel32

BackupRead
CommConfigDialogA
CompareFileTime
ConnectNamedPipe

gdi32

CreatePalette
WidenPath
CreatePatternBrush
DeleteDC
EndPath

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE