393d5708f26679e53cb7260fb93abd0a_JaffaCakes118 | Triage

Sharing

General

Target

393d5708f26679e53cb7260fb93abd0a_JaffaCakes118
Size

24KB
MD5

393d5708f26679e53cb7260fb93abd0a
SHA1

b72dcecc50109abf00a6209d0e5fc030122d7836
SHA256

3d2360663f857e00788bb02b7100bd7aae68a0f0f056e405df23e183d63ec476
SHA512

dfe23b8390ec1988c8e68021c0f30b324e7a0f196a1955bdd434222e11c350b9e97e8d3cbc5daadc45498e03b5f994ba6b4ccd389a8a3d616474665f784bd2e5
SSDEEP

192:ylQDRLKmjuMgeWo3l+NHsP1oyGOTKQ9Z1:yluKveWPNS1rT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
393d5708f26679e53cb7260fb93abd0a_JaffaCakes118

Files

393d5708f26679e53cb7260fb93abd0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

020895df7acf862659e083c64f7da9ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CloseHandle
GetTempPathA
GetLongPathNameA
CreateProcessA
CreateFileA
GetStartupInfoA
GetModuleHandleA

wininet

InternetQueryDataAvailable
InternetReadFile
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA

msvcrt

_controlfp
__set_app_type
printf
ldiv
isxdigit
isupper
isspace
ispunct
isprint
islower
isgraph
isdigit
sprintf
rand
srand
time
isalpha
isalnum
div
ceil
atoi
_except_handler3
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ