705cc41bb563abfca283918ad370896b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

705cc41bb563abfca283918ad370896b_JaffaCakes118
Size

104KB
MD5

705cc41bb563abfca283918ad370896b
SHA1

0f0d797dd3699a6a5b93ddc98446778eaf2f2349
SHA256

501b5abc2e906fa5c0afe7a9ac41e576a97c54ea71832a507b8387d150bb18b5
SHA512

fd25c349936eeeba0e3e5395a10e35bde112671a30b5e7a5868a983726bb71798625d1caa9d3d412a9881dec313af6b506efdd37ae286f53f398f4893fd3ce22
SSDEEP

1536:bm34oiYzYWH6YA1yYu/yQQcmq2WIwZccLGv3ZeLrIlGgqQolbI:S34dxfYA1du/acmhJcKv38AlGggbI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
705cc41bb563abfca283918ad370896b_JaffaCakes118

Files

705cc41bb563abfca283918ad370896b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE