ac7f68c29773cb4e3db5fc169364dc12_JaffaCakes118 | Triage

Sharing

General

Target

ac7f68c29773cb4e3db5fc169364dc12_JaffaCakes118
Size

101KB
MD5

ac7f68c29773cb4e3db5fc169364dc12
SHA1

e539bc43fff510cfacc8de0cd1b1b260f5e769cd
SHA256

0e946515b3150ee44789cfe19f61e4dd07f7f3ee752fdcd53213726c0501bad2
SHA512

b783ab5cce16ff754fced35d1becf30db7231e49dd3497e83ce45817036104bf53ac97d387154eeeefc6b6f78a37ae65c20f6d3a91b1a4c0f0c2c7c4027da704
SSDEEP

3072:lHP1kf8rnEFMtlBGs1lBVW63hyp/di201KFsX8WUF7o2nOQ8q:lHP1jrFjd1dxypVbtcOM2ORq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac7f68c29773cb4e3db5fc169364dc12_JaffaCakes118

Files

ac7f68c29773cb4e3db5fc169364dc12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9cd3ed70ff2af150d457d1f3355e2130

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLDownloadToFileA
CoInternetCreateSecurityManager
URLOpenStreamA

user32

MessageBoxA
CallMsgFilterA
AdjustWindowRect
CreateIcon

wininet

InternetOpenA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE