2a8ac645ebb9c6feaf6301b80010fd61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a8ac645ebb9c6feaf6301b80010fd61_JaffaCakes118
Size

112KB
MD5

2a8ac645ebb9c6feaf6301b80010fd61
SHA1

c08df1637fe8614ea319e2ca6b42845a3f866575
SHA256

db6bed09a0f1ee8273a25b16a97325a7f0091820dbe8d57d3ea1873b62c1eff3
SHA512

4597d02413403a980886fd4708c86e924c6b5913f586b3dee106780471fdf7f869b1947e4c8ff2357d03f68d78b925195896eef5fb51edde8d6a3769754a34a9
SSDEEP

3072:cQ12lTaWUd+SINGkEwQZLCgyr5hr3YGezeWt:dlt6Q+r5h0pze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a8ac645ebb9c6feaf6301b80010fd61_JaffaCakes118

Files

2a8ac645ebb9c6feaf6301b80010fd61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

185d630245e526903a424747a5873f5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FindFirstUrlCacheEntryW
FtpPutFileEx
GetUrlCacheEntryInfoA
GopherGetAttributeW
DetectAutoProxyUrl
GopherGetLocatorTypeA

kernel32

MulDiv
SetupComm
IsBadWritePtr
GetConsoleMode
LocalFree
HeapSummary

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 62KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE