334976e8e68f9607ea89375a06bed929_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

334976e8e68f9607ea89375a06bed929_JaffaCakes118
Size

16KB
MD5

334976e8e68f9607ea89375a06bed929
SHA1

a30697b0be4f331b6eb61e8d59f9feb2d795c74d
SHA256

009223e0c7254b14e4cac471a5ed8ded7e762470a481fe5a26807389600503df
SHA512

5a39f751080a3a3ab6770489b0ebb3a898d07440b80710d522060697a4a490a120fb6948ee8c089e5e2183d9f93a4d26d6e757752ccc835b68d4d09e9b685406
SSDEEP

96:gVRaeCZFYvU7OQ8fAd5xSyNbtbOP4oync:gVR/CZFYvKlB5xbZtbOP4oyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
334976e8e68f9607ea89375a06bed929_JaffaCakes118

Files

334976e8e68f9607ea89375a06bed929_JaffaCakes118
.exe windows:4 windows x86 arch:x86

430da49376e82dd3ed83c6e18d3044ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
GetSystemTime
GetTickCount
Sleep
CloseHandle

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA

msvcrt

_controlfp
rand
sprintf
srand
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_stricmp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE