62d22658d7c39d05da4cc235fc144292_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62d22658d7c39d05da4cc235fc144292_JaffaCakes118
Size

104KB
MD5

62d22658d7c39d05da4cc235fc144292
SHA1

d6b583b0f27879f5d2236a1b1d617c876cbc874e
SHA256

24346b5574b2d3444fa293e7889897b8a630e30c672280783ff307d4ea120b0a
SHA512

62084033b3ff94302204d5dc5bdab9c254401982caa51f718d8b83cab696a950370f3cadbaf7be0c9b3897d31989d718e94b21b4fb3004fa07d41732ebef6294
SSDEEP

3072:cSQ17qwLeogECzZ2Ik6V2WCV76ug3MJNtevUDpt:cSmLeogECAIaWO76uTJNtfDp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62d22658d7c39d05da4cc235fc144292_JaffaCakes118

Files

62d22658d7c39d05da4cc235fc144292_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE