4bdd6ee49774d2153144235107b7a149_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bdd6ee49774d2153144235107b7a149_JaffaCakes118
Size

24KB
MD5

4bdd6ee49774d2153144235107b7a149
SHA1

b64fd99072f4323cef636b1068919bb3cdce2bfa
SHA256

3943bd550ad291933ba3cbe14dbcf56fede86060e066e42fec35fe8716248a09
SHA512

5dec97ed931a1405b284712b58411ba32db452c3831af863a1bbcb0cc8f1ecc2d7d5ccddce2e4732a958294f8cb8b879bcff73aafe507c777102f62234a53037
SSDEEP

192:N/OORMqUTr6hPTPVGoP4oynJ/XhkVJIZMP0:0OCqUH6hPF4X/XhkDIZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bdd6ee49774d2153144235107b7a149_JaffaCakes118

Files

4bdd6ee49774d2153144235107b7a149_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb0227b4df511c9ac712e011148c065b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2915
ord537
ord535
ord540
ord2818
ord2764
ord858
ord800
ord4204
ord6877

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_mbscmp
__CxxFrameHandler
strrchr
_adjust_fdiv

kernel32

MoveFileExA
CopyFileA
Sleep
GetModuleFileNameA
WinExec
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
VirtualProtect
GetLastError
CreateMutexA
TerminateProcess

urlmon

URLDownloadToFileA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ