97596ddb08936939cf02b7bda2490dc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97596ddb08936939cf02b7bda2490dc8_JaffaCakes118
Size

12KB
MD5

97596ddb08936939cf02b7bda2490dc8
SHA1

4a13019fd48b724f1bc4b262722ea52c673c16a1
SHA256

cb0f87307da090e268d9fda2b37e443035359d3ba6a633c92a4c2e78852ab0a5
SHA512

f4d385a0fb972f2e94288b11589b21734db3654de54f26be166174759c044227b68134033da1f8884803648da5b7851752928fad8bdc26c304407e10442b47a7
SSDEEP

96:5z7vOn+LA74T5/7G8OVOzM/Jm8JChGnWmRzj5TmUaxzpzYbyu0fGMXVSvKsrQ:F7lLA7Ch7SOeJJCsWmVbEYbyu+XVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97596ddb08936939cf02b7bda2490dc8_JaffaCakes118

Files

97596ddb08936939cf02b7bda2490dc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6876b8f47cafac34d660969e2d63a7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

kernel32

MapViewOfFile
lstrlenA
CloseHandle
CreateFileA
CreateFileMappingA
CreateToolhelp32Snapshot
DeleteFileA
DeviceIoControl
ExitProcess
FindResourceA
FreeLibrary
GetFileSize
GetLocalTime
GetProcAddress
GetProcessHeap
GetTempPathA
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LockResource
lstrcpynA
Process32First
Process32Next
ReadFile
RtlMoveMemory
RtlZeroMemory
SetFilePointer
SizeofResource
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
WriteFile
lstrcatA
lstrcpyA

wininet

InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ