409b51cd0c17066ae5523fcb6c10c1bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

409b51cd0c17066ae5523fcb6c10c1bb_JaffaCakes118
Size

95KB
MD5

409b51cd0c17066ae5523fcb6c10c1bb
SHA1

55864cc4017363403d5af186d7595eff8d180876
SHA256

7dff2ad2db2c715e2adf9112e162e46831e81dbd899b37db45ef91aa0fe131a5
SHA512

31cf9c7b94644ce531bfc33c0de7ae992b3b81507e26a0017854df92b81580b47c60b929820632a2feb66a3e7205ccb141aceec396a8333645750717ca3a86e5
SSDEEP

1536:FpP3ovp3DROC9oMWWQ2Faeb/AJA5LvxCOYkyQXCgKX9LySEnCA:FpP3mpzRO8oM8Y9MJ2ABkyQX5K9KC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
409b51cd0c17066ae5523fcb6c10c1bb_JaffaCakes118

Files

409b51cd0c17066ae5523fcb6c10c1bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f57c191009b4235402edb5b6ee3508a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FindFirstUrlCacheEntryW
ForceNexusLookupExW
FtpRemoveDirectoryA
CommitUrlCacheEntryW
FtpSetCurrentDirectoryA
GetUrlCacheEntryInfoW

urlmon

RegisterBindStatusCallback
URLDownloadA
CompareSecurityIds
DllUnregisterServer

Sections

.text
Size: 69KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE