3373a221794dfed18515f8cf5704738f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3373a221794dfed18515f8cf5704738f_JaffaCakes118
Size

93KB
MD5

3373a221794dfed18515f8cf5704738f
SHA1

c333ef989180fc256a21e36955e86a0fe6575508
SHA256

3d73b500b6e966ea9f39a98aaa8967b3b1235ddadb44435401191ed85bb07e5f
SHA512

4c4a79be84968c5fd434cff2012b3e8f5ee165471970917464cf90aed54f2677282844c0431334f47fd7fb46c5efacb7825089a03b2ec906f0711e3fbe492d51
SSDEEP

1536:iehCariNnEE5ToIKiNMJbXCEF1FfTS1TfMhRsk6ZvBHY+Rh1+UUKpX+IiHc9:9hviiE5TPKGMJb1DG1FBHY+c3KpOhc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3373a221794dfed18515f8cf5704738f_JaffaCakes118

Files

3373a221794dfed18515f8cf5704738f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0221c3841a0f59bce90717fa559de35d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
TerminateProcess
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
IsBadWritePtr
CloseHandle
WriteFile
CreateFileA
GetVolumeInformationA
GetComputerNameA
GetTempPathA
CreateProcessA

user32

wsprintfA

shell32

SHChangeNotify
ShellExecuteExA

wininet

InternetReadFile
InternetOpenA
InternetCloseHandle
InternetOpenUrlA

msvcrt

strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
atoi
_except_handler3
atol
strncpy

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ