307330c2d9da1648b697e34a94e14527_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

307330c2d9da1648b697e34a94e14527_JaffaCakes118
Size

32KB
MD5

307330c2d9da1648b697e34a94e14527
SHA1

7da760110a0aee8e767aa1db8784dafe724d44b9
SHA256

ca92e9ecd947bfdf56b003cdb62ca4377777be6a0132d9f6735e1af6d4b5991c
SHA512

71e957a6b06e9db4844231b11f5c40932ea4610418305af9441d19f5923b7f5987a0ffaeae4d66916ebf5cd9be7bf9feff1edf81c6c569d7f774793908daf343
SSDEEP

384:Mc9psWJcFSAfyMj2xx2QCbykE0bvmH4ciu1VNipbNtCGyF55U:P9psWJcrKg2xxb+mH4Ru7sTIb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
307330c2d9da1648b697e34a94e14527_JaffaCakes118

Files

307330c2d9da1648b697e34a94e14527_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5f43a6c8dbd3cbb0ef5d2177bc63f42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
CreateEventA
WinExec
GetTempFileNameA
GetTempPathA
GetLocalTime
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapFree
IsBadReadPtr
CloseHandle
WriteFile
CreateFileA

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

urlmon

URLDownloadToFileA

ntdll

RtlAdjustPrivilege

msvcrt

_ftol
_CIfmod
sprintf
floor
modf

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE