2941a51d9751ecf09a3bc0c8ee9307f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2941a51d9751ecf09a3bc0c8ee9307f6_JaffaCakes118
Size

9KB
MD5

2941a51d9751ecf09a3bc0c8ee9307f6
SHA1

5a7fecb6436be25d8808d40c8ac5d0ffc71cbcb9
SHA256

94c78799fc174e09de085fe34f8cec2e347baac52d584f9aaa886c9a91372dad
SHA512

21013e24e3509e6690cee5e5dcae6b437e20a11667538a55cc6574f5db53348c2a73454728a788d51f7cc5d8d179c3d37bfe89f722ac9b2db28c1b12035ff997
SSDEEP

96:4DTN0ghpMLLEhJaZYx9SmcrqgZHxMJJ+qoGc/f4bKghJpG/fuy+6kke/l:UTNHr9hJlx9wrfZRfwb1JpG/O6kkkl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2941a51d9751ecf09a3bc0c8ee9307f6_JaffaCakes118

Files

2941a51d9751ecf09a3bc0c8ee9307f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d323b538553026006d2d4e9366c98af3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
WinExec
CreateThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RtlUnwind
TerminateProcess

user32

wsprintfA

wininet

HttpOpenRequestA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpSendRequestA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ