3a53ddd4487dcdcc7d2cbf20347ff98e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a53ddd4487dcdcc7d2cbf20347ff98e_JaffaCakes118
Size

25KB
MD5

3a53ddd4487dcdcc7d2cbf20347ff98e
SHA1

3039db60aab462b118a980630ee636f9d15275db
SHA256

c2d5752b17a16f0d926908b04d7ba719f4d2569c92aca648917adaeff0d82c6a
SHA512

4d61765fab5fb4a279a8fa6fc98c73a9a722f7518a50db5f784d2f1b3a0dfc0db237bb2da7f27e57de043db16095a101b9b468b722eab2f0c79bcb52f265d294
SSDEEP

384:+MZCec67pitdEhpixCL9FRyumln0WFUjsijxwoe/6:+MZCxivLicRFRjjPxwoq6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a53ddd4487dcdcc7d2cbf20347ff98e_JaffaCakes118

Files

3a53ddd4487dcdcc7d2cbf20347ff98e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbe25fee3f597cd3cccab1b94f028505

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
LocalAlloc
DeleteFileA
lstrlenA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
RtlUnwind
GetLastError
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileType
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetStdHandle
SetHandleCount
GetStdHandle
SetEndOfFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeW

wininet

InternetOpenUrlA
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
InternetFindNextFileA
InternetConnectA
InternetCloseHandle
FtpGetFileA
FtpPutFileA
FtpFindFirstFileA
InternetOpenA

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE