680f5eb5a3569d4707f659aae56d7b15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

680f5eb5a3569d4707f659aae56d7b15_JaffaCakes118
Size

452KB
MD5

680f5eb5a3569d4707f659aae56d7b15
SHA1

380bab9c33f45ca70130c5d0bfd7d4a2ea75724f
SHA256

49a0c8beb4c9fded67adadb798d7b68ae135bc3086582bf8199ceae51fdebfa5
SHA512

0ea0f9eacb566de4f676f28fc0764bc15a112f9e3f07a526c5ebf5360446afca62cf13cfd7c19de66ddcb143b95510a3618a97124f180d8617ae3a43db2dfd79
SSDEEP

6144:krXEMsUFRJihjSZTy3HVFkrJgBDbUZ9iSNEcww1GGO4awPk2VFcssYQTEtZh2M:CHtJA1SFkfvsGzkhuYVZh2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
680f5eb5a3569d4707f659aae56d7b15_JaffaCakes118

Files

680f5eb5a3569d4707f659aae56d7b15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e43ce9cb896b99339a97424e964f13a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructA
SetVolumeMountPointA
GetConsoleWindow
WriteFile
GetFileAttributesA
GetTickCount
GetDiskFreeSpaceExA
SetFileApisToOEM
GetCPInfoExA
FindFirstChangeNotificationA
VirtualAlloc
RemoveDirectoryA
SetFilePointerEx
SetConsoleTextAttribute
IsBadStringPtrA
SetFileAttributesA
GetProfileStringA
GetProcAddress
GetFileAttributesExA
GlobalMemoryStatus
MulDiv
SetLocalPrimaryComputerNameA
SetLastError
_lopen
GetCurrentThread
ConvertDefaultLocale
GetCurrentProcess
SetFilePointer

wininet

InternetUnlockRequestFile
InternetGetConnectedStateExA
FtpSetCurrentDirectoryW
GetUrlCacheEntryInfoW
InternetQueryDataAvailable
InternetCrackUrlA
ResumeSuspendedDownload

Sections

.rtext
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 424KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ