383ae025add0958449e179ce85642f11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

383ae025add0958449e179ce85642f11_JaffaCakes118
Size

26KB
MD5

383ae025add0958449e179ce85642f11
SHA1

da88f552e25dfe15b7a8a87dd70934c91e8ac6fe
SHA256

9de5b73194ee5ce83db7180b1275ac4a70eea0d1a26070ac92fbc64d63d97e43
SHA512

7a9856e4db3354323fd76e33e71cad6e8f355c6fb65df390ef9a2aa7745a0e3862b802a41a3b07c30a11ab129925253e4fe3d176a262ecd08b960b0dbd770ace
SSDEEP

384:jtqOtY1pGi1gculh9lwoSpagsRj1Ngoud6R3+FpMBGAaJsDT8ACUXMvU0+aK:jtql1pw/lh98ABRjc4RKyBGMTJQUtaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
383ae025add0958449e179ce85642f11_JaffaCakes118

Files

383ae025add0958449e179ce85642f11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

081b946f9077003cc0ce0b0c34c9fe59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

DeleteUrlCacheContainerA
FtpFindFirstFileW
FtpRenameFileW
GopherCreateLocatorW
GopherOpenFileW

Sections

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 145KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE