46fc009c2f500f279d20a089b4593c56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46fc009c2f500f279d20a089b4593c56_JaffaCakes118
Size

77KB
MD5

46fc009c2f500f279d20a089b4593c56
SHA1

321b29fbdcd2fb3241e77d4e2971a80698edbde2
SHA256

30fd014b3041bdfd232dc385a131c4225d4ae09c8c8bd891297cf07672673ac6
SHA512

9f21caca30b82ec303d255906d054bf2b24d44a836223d4c28892f9d730e40ccc248f192603002cad5af8300421d5324bdd247f9ec0d757164eaf28a0444a7b7
SSDEEP

1536:JSZVpYFUSJRtMfkdLFEl8NbUs5tbAy2cDXnDUBgb9/h8R+:AZ3YFUSJHMD8tUs5ey2cDYBgRZ4+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46fc009c2f500f279d20a089b4593c56_JaffaCakes118

Files

46fc009c2f500f279d20a089b4593c56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d309743db254e34ac6e45ca4809b8edb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
GetVolumeInformationA
ExitProcess
TerminateProcess
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
IsBadWritePtr
GetComputerNameA
WriteFile
lstrlenA
GetTickCount
Sleep
GetTempPathA
CreateProcessA

user32

wsprintfA

shell32

ShellExecuteExA
SHChangeNotify

msvcrt

strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
atol
_except_handler3
atoi
rand

wininet

InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 74KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ