429f30a261238b30c2bfec6ff15fe0fc_JaffaCakes118 | Triage

Sharing

General

Target

429f30a261238b30c2bfec6ff15fe0fc_JaffaCakes118
Size

28KB
MD5

429f30a261238b30c2bfec6ff15fe0fc
SHA1

bfc690a677cdc7cece5590f2344c8330a372ab49
SHA256

62dd33a69b61c00a3b6eb7d9995b90dcdd15d9a08325000f80cff3d33d9d2785
SHA512

08c5067f44c68092352e334c15f81ae20172874aaefbf44972df9cb441734a39c4768e24b0dd27932a007fa238e953a39ed923f41fecddab93500d862871b741
SSDEEP

768:BlDE/SgrET2l+XUabI60JX/EWDTTt/Kq//3Nob:HE1ANh0llL/3Nob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
429f30a261238b30c2bfec6ff15fe0fc_JaffaCakes118

Files

429f30a261238b30c2bfec6ff15fe0fc_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5dd6afff6fc75d68355661fe0b98a5be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FtpGetFileSize
FtpRemoveDirectoryW
CreateUrlCacheGroup
CommitUrlCacheEntryA
DeleteUrlCacheGroup

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 14KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE