2548fc14898bebc929e7ba5a707651a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2548fc14898bebc929e7ba5a707651a5_JaffaCakes118
Size

22KB
MD5

2548fc14898bebc929e7ba5a707651a5
SHA1

a425b126a69e19067a645d39c982866c922d0be0
SHA256

c5f22ba009a5bbd3db216dc809b59f38ad10c23f899f1790fa66358be8bad035
SHA512

5a5a195072e336dbc3925e32d31b55ad10871ae4365ec8822695a859d847fbacc2711969fe29215e1196357fd9cba53f6eb617c676abcbb96711fe1d29e4cc98
SSDEEP

192:4WH2XUumGanbTDG0u/SfzkoLMR0GPEYF8TRU/YYH8Pwr5EztkuDS:4pmG2G0u/yzk8OEcCI9Eztr+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2548fc14898bebc929e7ba5a707651a5_JaffaCakes118

Files

2548fc14898bebc929e7ba5a707651a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8c3da65d4300237bfd4a3487c866aad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyA
RegSetValueExA

kernel32

AddAtomA
AllocConsole
ExitProcess
FindAtomA
GetAtomNameA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fputc
fputs
free
malloc
signal
strcat
strcpy
strlen

user32

FindWindowA
GetAsyncKeyState
ShowWindow

wininet

FtpPutFileA
InternetCloseHandle
InternetConnectA
InternetOpenA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE