6ad0e417700e363e32385c009aaffe42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ad0e417700e363e32385c009aaffe42_JaffaCakes118
Size

24KB
MD5

6ad0e417700e363e32385c009aaffe42
SHA1

eef7fd0ac8fedb4c02265c1d9ab5744e95038ba7
SHA256

a4007f2fc237b29d9169373edbc861491e055426bf3c1c1bba7fc030f757f124
SHA512

9c22943537330a72901e6e68afa1d3230f7c8a77a866cf47a06be9b6aee0c13a4d7b5557dacff7566bca9de400feacd533099acbf074d5cd59302f764f369f41
SSDEEP

192:5jBDswhkh0rCn7wd0NJqpa3DUsP1oyxJKQ9Z1:tBDaw2Npl1DJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ad0e417700e363e32385c009aaffe42_JaffaCakes118

Files

6ad0e417700e363e32385c009aaffe42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac32b946d5fa79fd71c180203679fc85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameA
GetTempPathA
CloseHandle
CreateProcessA
WriteFile
GetModuleHandleA
CreateFileA
GetStartupInfoA

msvcrt

time
isalpha
isalnum
div
ceil
srand
rand
sprintf
_except_handler3
atol
??3@YAXPAX@Z
atoi
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__CxxFrameHandler
??2@YAPAXI@Z
_itoa

wininet

InternetQueryDataAvailable
InternetOpenUrlA
InternetOpenA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ