aadd6c1a6092439bff13707b244f1fdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aadd6c1a6092439bff13707b244f1fdd_JaffaCakes118
Size

17KB
MD5

aadd6c1a6092439bff13707b244f1fdd
SHA1

0c48e05a29f9f3b91fe1bc635a5984e0ada57178
SHA256

676dbcd8b29623b852d4201874293f26d8e5c0ce5586b36bd00343edf2a1454f
SHA512

65a02eee9c21c3234a17f25b4933871832c67b6030fcf293ebdff0d5501835c45a828cb62a388d140f5cd8fd1ade0519943e066dfb527f278f5b99d866a803c5
SSDEEP

192:UfbrFHBOcMubM9db317u+He5YOTknQpKj3TJJmCDa:Ufb28bWF7uwehAQkXJJl2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aadd6c1a6092439bff13707b244f1fdd_JaffaCakes118

Files

aadd6c1a6092439bff13707b244f1fdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e70e9f81c17143dfb5c89d58f56db66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
WinExec
lstrlenA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
free
fwrite
malloc
signal

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE