3a7c9f6f152c52ee2374d8221e2d5977_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a7c9f6f152c52ee2374d8221e2d5977_JaffaCakes118
Size

4KB
MD5

3a7c9f6f152c52ee2374d8221e2d5977
SHA1

47a76b77c1684aa9af724f49d1889035247c869b
SHA256

1032bebb1728a033a6410111bd7b78ec706ca5b880b693a33057913f7962006b
SHA512

a2a630315ea5d6737cdc688627861a09d1c47e81a02e335ae7faa5fda592b8d06a487ec87d29fc6850eae2e3b9a6ad68df6db0bf1826ca440d191af569384645

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a7c9f6f152c52ee2374d8221e2d5977_JaffaCakes118

Files

3a7c9f6f152c52ee2374d8221e2d5977_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57a955ac7e6f8b32cf215ce534bf1c4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WriteFile
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
RtlZeroMemory
Sleep

wininet

InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCloseHandle
InternetOpenA

Sections

.text
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ