3da43564891b73c3842c40b23918c894_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3da43564891b73c3842c40b23918c894_JaffaCakes118
Size

12KB
MD5

3da43564891b73c3842c40b23918c894
SHA1

07b45c970f98500eb13708f63236cc27193447c5
SHA256

74a1cfbfa94aba9718f3d9299643aedcff5247d1e3dba4eb205b9e8e6a5b4801
SHA512

5135529501b6660cca69aa7b283697c2a5aa21d32f9ac5fe489f8b906a14ccd0475a52fb1b99e1c02007f0eabe020d6118c018f528d9a63f5ee07cf91d54e41f
SSDEEP

192:mgvRJLTGLMfxULK137r2N9zS5ZhItY++3sxBaxmAhHBLb7mecs:fZ1TZgKFON9zawa++3sH6LT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da43564891b73c3842c40b23918c894_JaffaCakes118

Files

3da43564891b73c3842c40b23918c894_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b4e3f70b6ea4a4966706bc977170db22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FindNextUrlCacheEntryA
GetUrlCacheHeaderData
FindNextUrlCacheEntryA
CreateUrlCacheContainerW

shell32

SHBindToParent
SHFormatDrive
DragQueryFileW
SHGetDataFromIDListA
SHGetPathFromIDListW
StrStrA
ExtractIconA

msvcrt

__iscsymf
__argc
__toascii
__RTCastToVoid
__unDName
__badioinfo
__crtLCMapStringA
__pioinfo
__unDNameEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 883B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE