ab69434984672f52cf34c0d2e73de36d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab69434984672f52cf34c0d2e73de36d_JaffaCakes118
Size

59KB
MD5

ab69434984672f52cf34c0d2e73de36d
SHA1

6e624a415b7f90a61c0bfad03db286c792787713
SHA256

e229cd047751195548ad09ab4cb716e2a4ce954180ac0101857acb0b8a263ea3
SHA512

2ef94e4851185ce8f278e1c74de76d641671df77d541b984d93e3194db20ae4b8feeb98a07e2d65bc2adc6ee8b02403a08d7cc40d3769996c0f0fbfa8064389b
SSDEEP

1536:9kFYPdkg44eDlesLfxNMCUNh3w5Jx3UVIf:6iPdk6+EGpE3w5JxE8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab69434984672f52cf34c0d2e73de36d_JaffaCakes118

Files

ab69434984672f52cf34c0d2e73de36d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ad802e63f9057c33cfe6bd02db6579d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

mpr

WNetAddConnection2A

wininet

InternetOpenA

shell32

ShellExecuteA

wsock32

htons

Sections

.text
Size: 57KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mian1
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE