392f82ef2bce09426bd420b2ed4a8b15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

392f82ef2bce09426bd420b2ed4a8b15_JaffaCakes118
Size

20KB
MD5

392f82ef2bce09426bd420b2ed4a8b15
SHA1

569c86e5328c382a52554063688302a62903170c
SHA256

d96f4a44121222bf1be12685f6d4f191d8cf2cfd537c5ea00c6f2731ad922715
SHA512

c4e6526d8ed4bb430b38faef1799f5efb735d92ccfb15314f79f86bf58ef67bd2bd5cf5e3407259bcd448b6863fcd5abb7b6b189695938396be35513784f11db
SSDEEP

192:QERJFDZLViqxnsGoXPhCls9aQnmn31bBsP1oy3EluqQ9Z1:nb1gGlbU1Glu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
392f82ef2bce09426bd420b2ed4a8b15_JaffaCakes118

Files

392f82ef2bce09426bd420b2ed4a8b15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a28a7774dd6386c74d60685b5ddde44e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameA
GetTempPathA
CloseHandle
CreateProcessA
WriteFile
CreateFileA
GetStartupInfoA
GetModuleHandleA

msvcrt

srand
time
ldiv
rand
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_except_handler3
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atol
_XcptFilter
_itoa

wininet

InternetQueryDataAvailable
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetReadFile
HttpQueryInfoA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ