abadcd47bdafc6d5106bb7d2c1a2c764_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abadcd47bdafc6d5106bb7d2c1a2c764_JaffaCakes118
Size

70KB
MD5

abadcd47bdafc6d5106bb7d2c1a2c764
SHA1

bcea121b715a2a46835d2b65c7b50063d3ebf1c4
SHA256

0b97db116191a8b61257beb44eaa59722e7c8f99d4597f1e0b6f10aa5cdab22d
SHA512

9b54038f192563cb079ff697dc645905425eb18b5056477cecbf48137707d4e6fc852ceb562c5896d8304f49459a481efdd7cf815b863962ac86a0ad32fd5044
SSDEEP

1536:RJZazDTPY+5ozlJWvIxFQL27KYKX7E3Vh9Dfeq:R/aPY+5oTWgQL27KYKg3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abadcd47bdafc6d5106bb7d2c1a2c764_JaffaCakes118

Files

abadcd47bdafc6d5106bb7d2c1a2c764_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7849dd320fe2aab7ee12a2d021bcf41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FtpFindFirstFileA
FtpPutFileW
GopherCreateLocatorW
FtpCreateDirectoryW
CreateUrlCacheContainerA
GopherOpenFileA

urlmon

CreateURLMoniker
URLOpenBlockingStreamA
CoInternetParseUrl
URLOpenBlockingStreamA
UrlMkBuildVersion
CoInternetGetSecurityUrl

user32

DrawIconEx
EnumWindows
DdeNameService
FrameRect

Sections

.text
Size: 39KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE