49e82e0bdd5754f45b595d90d4ac93b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49e82e0bdd5754f45b595d90d4ac93b2_JaffaCakes118
Size

108KB
MD5

49e82e0bdd5754f45b595d90d4ac93b2
SHA1

07ead2a34566ff03385adbd828e374fb96d6a1e1
SHA256

20deb8939a279ee9bc3b10d809b08b184d8b60306ffdd87798cec09e189c32e3
SHA512

6170a57e7edf4999ad0e86be089eb3c4f13c8c154a43d35e1ed6ca5083f31c01944c8b56670c5e5c771066b0d03312702fa31a1c20ccf4cd330bf2db38d183a6
SSDEEP

3072:WSBgL82Qz/UKwuZQemisU4zSQ0pB3o2xoKc:HatOsKwuGemG4m7pe2mx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49e82e0bdd5754f45b595d90d4ac93b2_JaffaCakes118

Files

49e82e0bdd5754f45b595d90d4ac93b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ab944c3b7b9d49f49d303b57f61fc88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRect
MessageBeep
MessageBoxA
CallMsgFilterA

urlmon

HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLDownloadToFileA
CoInternetCreateSecurityManager
URLOpenStreamA

wininet

InternetOpenA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE