3f7dac4e4119a18e35db7814b22d7253_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f7dac4e4119a18e35db7814b22d7253_JaffaCakes118
Size

99KB
MD5

3f7dac4e4119a18e35db7814b22d7253
SHA1

7a21da58c14cf71fa8cfd78e8aefc74111e5e8c0
SHA256

1ca0459c46ac8bafb9202714425dc56bc92e65645f19a2bedab6198d45ba2875
SHA512

6d407175d85340f3c9ac839a19470fd2f8c4e84a64c6760e826d55ef8abc7379472f122490115a4f76955766e3304207f8ae21c520670f4c664ee815f8045b94
SSDEEP

1536:lHbPjzwKQz/HkAChVnwEKYfN3aPSRv+cOrJFf6rFCcI5Y5eam7sMHqc5w:pqOVwEZV3aVcO6rFCcI5K6sMK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f7dac4e4119a18e35db7814b22d7253_JaffaCakes118

Files

3f7dac4e4119a18e35db7814b22d7253_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d47a854d4e06220ea2a0192e1002a03a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

ForceNexusLookup
FtpPutFileEx
FtpRemoveDirectoryW
CreateUrlCacheEntryW
GetUrlCacheEntryInfoExA
GopherOpenFileA

urlmon

MkParseDisplayNameEx
IsJITInProgress
URLOpenPullStreamW
ZonesReInit

Sections

.text
Size: 69KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE