6409827555743dbc6fd635e1d2316240_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6409827555743dbc6fd635e1d2316240_JaffaCakes118
Size

8KB
MD5

6409827555743dbc6fd635e1d2316240
SHA1

2dd2db8820e41ae18cceb5a42c459b90bddec5d8
SHA256

43100af3105b63343b3c26e1185d9876ba26f28634cb913e729b266a1194bb2f
SHA512

52c1bf0155b614a41b81523a00e1573d10a0679651ae836f8403b549bf22d25821675686c66e1e4e4f301fc2de99c4a836c39daa5008569daf91656cfac52d72
SSDEEP

96:BIVFeHIx7jNYafg128vfAGZ2IO8KC4utQUcG4v3NWFDFKbYEWA5kxL5IicHYq6:BIVFYQmaBXsKPbfA7sYEWmkz5cHYq6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6409827555743dbc6fd635e1d2316240_JaffaCakes118

Files

6409827555743dbc6fd635e1d2316240_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8e11062812dc3a8264f9e609d702bc7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenA
InternetConnectA
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestW
HttpQueryInfoW
InternetCloseHandle

shlwapi

UrlGetPartA

kernel32

CloseHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
FreeLibrary
LoadLibraryA
GetProcAddress
lstrlenA
lstrcpyA
GetTempFileNameA
GetTickCount
GetEnvironmentVariableA
RtlUnwind
WriteFile
CreateFileA
ExitProcess
DeleteFileA
WaitForSingleObject

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ