24bb5af4a7a34320a35f3c32b3a4eea5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24bb5af4a7a34320a35f3c32b3a4eea5_JaffaCakes118
Size

38KB
MD5

24bb5af4a7a34320a35f3c32b3a4eea5
SHA1

ac768f040f709b9dca14abad25b25308744c5227
SHA256

2a10809ab34c21c444c966761986fadda111266ae85537c665ce868c68947292
SHA512

41cef386d0cc06e4aaeccb8d4a0a450052f5b0cf75809afe2265e898d13d67a0e34a991f9999233879c308285eaa07696067d80cccd9a00b4ede8eb41698f71b
SSDEEP

768:Sd+GqNfS32QD/Zk0rr+GsUEwEhaYJVLsxiFZVjDY2kksHbB2rr:G+GsfX8k0rrjwRhaA1sqTjDVkk6BI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24bb5af4a7a34320a35f3c32b3a4eea5_JaffaCakes118

Files

24bb5af4a7a34320a35f3c32b3a4eea5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4e3f70b6ea4a4966706bc977170db22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FindNextUrlCacheEntryA
GetUrlCacheHeaderData
FindNextUrlCacheEntryA
CreateUrlCacheContainerW

shell32

SHBindToParent
SHFormatDrive
DragQueryFileW
SHGetDataFromIDListA
SHGetPathFromIDListW
StrStrA
ExtractIconA

msvcrt

__iscsymf
__argc
__toascii
__RTCastToVoid
__unDName
__badioinfo
__crtLCMapStringA
__pioinfo
__unDNameEx

Sections

.text
Size: 25KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE