8a11c66cf3858b8bf7e8cda2b67417e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a11c66cf3858b8bf7e8cda2b67417e8_JaffaCakes118
Size

16KB
MD5

8a11c66cf3858b8bf7e8cda2b67417e8
SHA1

251077a5310602b2db9f491cba6bb96278262c11
SHA256

3f662982c2067dd3da6b6ab8fe5df597dd8a52a9af1cd62df9341b5d9143a903
SHA512

eaf6ddeac06574b18e8c6199713a1012fa6b4a8abc628702674ded5918454693a7e83cc641fe6f47289822e8c9ff4cc78ad7effd18d90d23e41fc47b28e14c1c
SSDEEP

96:DiTm1/EpO7TATUulRBs9rFBO9Z2HV54G2Ndg08PA5eM1SMOajEjL:Cm1v/aUUs9rvOvyuG2N/RPOV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a11c66cf3858b8bf7e8cda2b67417e8_JaffaCakes118

Files

8a11c66cf3858b8bf7e8cda2b67417e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4bccbfb1617824748b7eb8757fcf556

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
ForceNexusLookupExW
FtpOpenFileA
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA

comdlg32

GetOpenFileNameA
LoadAlterBitmap
dwOKSubclass
dwLBSubclass
PageSetupDlgA
ChooseFontA

kernel32

DuplicateHandle
ExitThread
TerminateThread
WriteFile

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE