4079e51be6f68f8b856777bd3a998ac7_JaffaCakes118 | Triage

Sharing

General

Target

4079e51be6f68f8b856777bd3a998ac7_JaffaCakes118
Size

216KB
MD5

4079e51be6f68f8b856777bd3a998ac7
SHA1

b321ec7ed6b6e2a6426852440fdb70220b3995a9
SHA256

14c34def64b2202c0aef2b736c4909161e6e2f4c4ac8d5671f0b41f442a4b634
SHA512

3aa3038f550d4ed7218d52f7b20f4310eb4b03d07adfff05bd743eb6991597494a5598078f796537df142d48cc951da8a8d9e894659c7079d7e555dae3c4c22f
SSDEEP

3072:z4zyog1rtukNm2AyD1FRKZ5mp+6PgZVobkxh5QVNpFqVoGo:z4zo1AkNeaFwZ5ubgzokm9M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4079e51be6f68f8b856777bd3a998ac7_JaffaCakes118

Files

4079e51be6f68f8b856777bd3a998ac7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2cc5254f344a8023785e2dfb768c5495

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
GetModuleFileNameA
WriteFile
WaitForDebugEvent
GetWindowsDirectoryA
OpenFileMappingA
VirtualAllocEx
GetVersion
GetCurrentDirectoryA
ExitVDM
GetVolumePathNamesForVolumeNameA
SetComputerNameA
lstrcpyA
GetFileTime
LoadLibraryExA
SetThreadExecutionState
LocalUnlock
GetProcessHandleCount
CreateMutexA
SetConsoleDisplayMode
SetComputerNameExA
HeapSize
ChangeTimerQueueTimer
ReadConsoleInputA
GetTempPathA
VerifyVersionInfoA
ResetEvent
SetEvent
SetPriorityClass
IsValidLanguageGroup

wininet

InternetUnlockRequestFile
FtpSetCurrentDirectoryW
FtpRemoveDirectoryW
InternetQueryDataAvailable
ResumeSuspendedDownload
InternetGetConnectedStateExA
InternetCrackUrlA
FtpSetCurrentDirectoryW

Sections

INIT
Size: - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 204KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ