a3aba54af6c84ef0d9d480c36cb81b71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3aba54af6c84ef0d9d480c36cb81b71_JaffaCakes118
Size

6KB
MD5

a3aba54af6c84ef0d9d480c36cb81b71
SHA1

a6ff165457a1d1ade7344a54adec748b3db47d27
SHA256

9caab5dee1149e5a9837c166e3eaeb77f38f965b9194e85e39ead1b41b4af9ef
SHA512

73be325831841f9bc77a7fd3741f79753252607371e5cd239966bb6efcf634c5c5cba85d8f620a05a4efebad0e83184cc8960a19515d6ac4ffc467439f4ad758
SSDEEP

192:1/bk7EDIutrdG3FfAWFn1eJBv8X5xcj/liNOGdz:1xRtimsxsgNOE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3aba54af6c84ef0d9d480c36cb81b71_JaffaCakes118

Files

a3aba54af6c84ef0d9d480c36cb81b71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b6b041e7cb7b4bc5a6eb4c2fd98a2c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
isprint
__p__fmode
_XcptFilter
_except_handler3
_controlfp
ispunct
isspace
isupper
isxdigit
ldiv
_exit
_c_exit
atoi
sprintf
isdigit
time
isgraph
__set_app_type
islower
__p__commode
printf

kernel32

GetStartupInfoA
GetTickCount
SleepEx
GetLocalTime

user32

wsprintfA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shlwapi

SHSetValueA
SHGetValueA

netapi32

Netbios

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE