69dc1e1ee273e531e91c60eb86396cc8_JaffaCakes118 | Triage

Sharing

General

Target

69dc1e1ee273e531e91c60eb86396cc8_JaffaCakes118
Size

16KB
MD5

69dc1e1ee273e531e91c60eb86396cc8
SHA1

31695c2b270f06b484663d48fc7fc1803473de3e
SHA256

025c784b8c2d6135d11cb551cb84645ecc0fb02ec8fd8f2612babd28601e67cd
SHA512

f81d11ddeff986fd6e21d11785aace3268ce2b87182871b9d20d254369d76bdbac1731e7d7141dd8c03f13138d2defdbd4e25b147132567cfa94e5d81a0fc745
SSDEEP

384:7hA3A0PoUPoT8e+E67Qq7Q6MxpRz7m9tIWjInL1YZ:7hSPoUPoT8e+YV6aLz7mQWj0BG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69dc1e1ee273e531e91c60eb86396cc8_JaffaCakes118

Files

69dc1e1ee273e531e91c60eb86396cc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

030e3463af2040f90708c1da4a188874

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetModuleHandleA
GetStartupInfoA
GetLongPathNameA
LoadLibraryA
GetProcAddress
GetModuleFileNameW
Sleep

ws2_32

gethostname
WSAStartup
WSACleanup

advapi32

RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegSetValueExW

wininet

HttpSendRequestA
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile

msvcrt

sscanf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
atoi
strcat
strcpy
fclose
fflush
__setusermatherr
fwrite
memset
fopen
strrchr
??2@YAPAXI@Z
atol
??3@YAXPAX@Z
strncpy
strstr
strlen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ