ac1cd4f48b386ba6a5055931a45f8dfd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac1cd4f48b386ba6a5055931a45f8dfd_JaffaCakes118
Size

104KB
MD5

ac1cd4f48b386ba6a5055931a45f8dfd
SHA1

2f4126241aa1a4b32256158f8d9d30d297641da8
SHA256

4e1d0874986d074ca1b0ee4a0aa09c0f14f9cfa6a05cac3bc8fc20ef16cd87d9
SHA512

6ab6ebf0bc3c05f32566063ff82949c786b14336a4f3668bd3c94f044ee77ef03d839b582c38590c6c2e343c6a866f57e4135c8986e5eaee6136ab6d537ac636
SSDEEP

1536:9vrIjuA8DQ7ZtOIYVQSTOP+ZhUU+KANVhdHL1ZdB+184LV/xrO/2CbUmvxjwrs:NrUhOIx2ZhtpYz1Z4NxrO/fXxjos

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac1cd4f48b386ba6a5055931a45f8dfd_JaffaCakes118

Files

ac1cd4f48b386ba6a5055931a45f8dfd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE