3d9e343425c012fa9204dadd60ecf1b4_JaffaCakes118 | Triage

Sharing

General

Target

3d9e343425c012fa9204dadd60ecf1b4_JaffaCakes118
Size

90KB
MD5

3d9e343425c012fa9204dadd60ecf1b4
SHA1

b8de7860b78358663a0e47ccf45a581e2a4a8006
SHA256

0de3d21873f56e233c045cb6c94122bdedc69ac9dde0479e8ef09fae8b0c48f5
SHA512

d0d466386cda7faf18358c2a09b7b6c90c2032f5033c0103bf33ed78469d5ae71c7a16129263836264b7d66e1c2318027b5a30700a73f8a5f5c9e48f5c85c570
SSDEEP

1536:huiyaDGK6FJ/fc0U3X5ItM5CEmEGIourvpobDVMuMCkT6D80+ot:hLDb67/q3nCEmQGbSgIO8Po

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d9e343425c012fa9204dadd60ecf1b4_JaffaCakes118

Files

3d9e343425c012fa9204dadd60ecf1b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE