788f985a4ceb301ac3f0a25ea1eda569_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

788f985a4ceb301ac3f0a25ea1eda569_JaffaCakes118
Size

4KB
MD5

788f985a4ceb301ac3f0a25ea1eda569
SHA1

9885592b16f5f00969623c6b7c3b2432d3d64bce
SHA256

e26c665727c472864b078f9dd26e4b76a25407361dbfa7e9f75d8ee4c098db29
SHA512

705999912e8a0b0d5420fd1095f6b07084534acb8a6fffcc2dc3c06ef1285a982d074f2ee1038e3a07150f5f2af550a561115e7a566a6ea0afe07e2031e9b63a
SSDEEP

48:qU++1kBHAGbxaoEe7+hs8cTKlXErWyfFRSPlrUB0RP9uNul:LfGbGhs8cT+XErREFUSl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
788f985a4ceb301ac3f0a25ea1eda569_JaffaCakes118

Files

788f985a4ceb301ac3f0a25ea1eda569_JaffaCakes118
.exe windows:5 windows x86 arch:x86

59c2d35d89fa5b9cd22c8a60e47b2046

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
HttpQueryInfoA

kernel32

CreateProcessA
CreateThread
GetTempPathA
CloseHandle
CompareStringA
ExitProcess
CreateFileA
lstrlenA
WaitForSingleObject
SetEvent
WriteFile
GlobalAlloc
CreateEventA
GetModuleHandleA
lstrcatA
GlobalFree
lstrcpyA

user32

DialogBoxParamA
EndDialog
CharNextA
SetDlgItemTextA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ