49c71271a473b34f2cffe645c577febe_JaffaCakes118 | Triage

Sharing

General

Target

49c71271a473b34f2cffe645c577febe_JaffaCakes118
Size

24KB
MD5

49c71271a473b34f2cffe645c577febe
SHA1

1e1a12635a3791bade71c1bc33c589d371737695
SHA256

6f447f2f86deed211391561305497fa9179ea168dd6086a4e0fbdff44ec0c092
SHA512

463de6b071d95fb44379b134f38c5d52097a51ac273b95610f9cf51e776a3cee02bc3c10954147a5b0d75dc5ba7fc272262a3023d07d3b5ea419da3007d36c1c
SSDEEP

192:efzPWatOifCGJkfouQwzKN+FcU4clCeu8Fi+zKiufHEd+iA7jd0108Cd:efTF2oyKoWUx1o+zHufHfiA7ea8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49c71271a473b34f2cffe645c577febe_JaffaCakes118

Files

49c71271a473b34f2cffe645c577febe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

35abf30c1d57a1e6e070bad40206d328

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexW
GetLastError
CreateProcessA
CloseHandle
CreateThread
Sleep
WriteFile
ExpandEnvironmentStringsA
SetFilePointer
CreateMutexW
CreateFileA
GetModuleFileNameA

user32

wsprintfA

advapi32

RegCloseKey
RegEnumKeyA
RegQueryInfoKeyA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA

msvcrt

_strdup
_except_handler3
free
malloc
rand
sprintf
_tempnam
sscanf
strncmp
_strlwr
strstr
memset
realloc

imagehlp

CheckSumMappedFile

wininet

InternetOpenUrlA
InternetReadFile
InternetOpenA
InternetCloseHandle

Exports

Exports

_init_code@0

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ