a3182c062055ae9bee4414944d7ca927_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3182c062055ae9bee4414944d7ca927_JaffaCakes118
Size

10KB
MD5

a3182c062055ae9bee4414944d7ca927
SHA1

a903f9fa2ce5bfdca116a7211bf06ba34a6b0c31
SHA256

0d661ef8a837ffec37f4d5abfb6f1837235e86770b5343c27390529f25b7a1fa
SHA512

f46d270a2812e36a76661b78c1d3e1efecdd87f2b70129583324c789f438372785de13f118669fd0bdab95ce78c4d6b6a195c09d858d44a245ed17e55997ca1e
SSDEEP

96:nCTxL8WNnZuHnnwR2Ul2ClAhx36vUlqKayrz9qWOOvw6gHulGH4a/QeN/wwf2/8:nExinwR2cBAjrzcXiOhN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3182c062055ae9bee4414944d7ca927_JaffaCakes118

Files

a3182c062055ae9bee4414944d7ca927_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ