63aa7d8dae7b4a4fa84eb44e33a21033_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63aa7d8dae7b4a4fa84eb44e33a21033_JaffaCakes118
Size

5KB
MD5

63aa7d8dae7b4a4fa84eb44e33a21033
SHA1

81f77c718e1682247828676b80e442359a47a21f
SHA256

3db5e73d1331eb4c98954cf34c1f2a660328347fa8f3e1989d9483208a7d6ead
SHA512

db18e3239776a19a1af078af46f6881019a205f318346fd1bd87fb03309a11010cf342678dd4b58f09f1c19abf4d15f74ff863df01d6c36ccc228e3ccf70e8f3
SSDEEP

96:HkJ0Fdmt1b+8Srs/CZ++SqpjZE8J/MWcDsE2Qma7E7Df0C/luJeAFJ8U:Tz80sKtpLkWlE2Qma7E7DMEOT8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63aa7d8dae7b4a4fa84eb44e33a21033_JaffaCakes118

Files

63aa7d8dae7b4a4fa84eb44e33a21033_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3038b721066cf8553b0030f5d061a48a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
DeleteFileA
GetTickCount
WinExec
GetTempPathA
GetProcAddress
LoadLibraryA
CreateFileA
ExitProcess
WriteFile
lstrcatA
lstrcpyA
Sleep
CopyFileA
SetFilePointer
ReadFile
GetWindowsDirectoryA
CloseHandle

user32

wsprintfA

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

shlwapi

PathRemoveFileSpecA

msvcrt

fclose
_itoa
sprintf
_except_handler3
strchr
fopen
fscanf
_stricmp
??3@YAXPAX@Z
??2@YAPAXI@Z

rpcrt4

UuidCreateSequential

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ