35ed371974413c513028da6ddbe863d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35ed371974413c513028da6ddbe863d2_JaffaCakes118
Size

93KB
MD5

35ed371974413c513028da6ddbe863d2
SHA1

ef30ec327c3edc51d613496ee23493c452b9588f
SHA256

3d7de143e80d8b270ae22b76a94c4577951ec3913ccbbc466f1cbc3e04d8ee10
SHA512

e7b1680baabbac53895eb192f0378ed9c7d1e5afe07991e63be8a37ad1803b0d1102f3bc69b8beeabb49d381c999733e56593ed0c3be1d889cc34e73d3867b1a
SSDEEP

1536:Bwdl2Mq++2tiIxTwshU+5NhMPcvJuodF2AumvjXJVbOe3xxV2A3/AMyPGmwrfn2M:R2DxbU+5NhMEQkF2AukjX6KxV2AFKwz2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35ed371974413c513028da6ddbe863d2_JaffaCakes118

Files

35ed371974413c513028da6ddbe863d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e831f73c13514501361352a09e5fabc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

RegisterBindStatusCallback
URLDownloadA
CompareSecurityIds
DllUnregisterServer

wininet

FindFirstUrlCacheEntryW
ForceNexusLookupExW
FtpRemoveDirectoryA
CommitUrlCacheEntryW
FtpSetCurrentDirectoryA
GetUrlCacheEntryInfoW

Sections

.text
Size: 69KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE