3feb14c22a82c7d6b102c001f67cae3c_JaffaCakes118 | Triage

Sharing

General

Target

3feb14c22a82c7d6b102c001f67cae3c_JaffaCakes118
Size

20KB
MD5

3feb14c22a82c7d6b102c001f67cae3c
SHA1

3c6125acba8d13b57f9a92126aaab2bc04b2ab49
SHA256

9934f8a9b37acf482c79779be595b641100d6ca024554e1434d161bcb68aa8b6
SHA512

3829407f7e04225349d0d5e0a53b26764510d35a114c67075c6048743cbcca5ef59f446140a1335f0f6ea126a01050e54e77a599ba079e31038d3ab468b51d66
SSDEEP

96:Q/p09k4AmiRTKJO3qBYuYK1j4MX6Edp9xYRRMMlUDa+i8JeAFJp9DZX7kX:QGyJRTKkqmuYK1jbzYMHDa+zTrZrk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3feb14c22a82c7d6b102c001f67cae3c_JaffaCakes118

Files

3feb14c22a82c7d6b102c001f67cae3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4bccfedd9fcd88abf4d3abb90cab6d19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
DeleteFileA
Sleep
GetTickCount
GetTempPathA
lstrlenA
LoadLibraryA
ExitProcess
CopyFileA
CreateDirectoryA
GetWindowsDirectoryA
GetLastError
CreateEventA
WriteFile
lstrcatA
lstrcpyA
CreateThread
GetProcAddress

user32

wsprintfA

advapi32

RegCloseKey

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

shlwapi

PathRemoveFileSpecA

msvcrt

_stricmp
_access
_itoa
sprintf
strchr
fopen
fscanf
fclose
??3@YAXPAX@Z
??2@YAPAXI@Z

rpcrt4

UuidCreateSequential

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE