ae124d5bab38396c7ea448fb73e73f59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae124d5bab38396c7ea448fb73e73f59_JaffaCakes118
Size

7KB
MD5

ae124d5bab38396c7ea448fb73e73f59
SHA1

315f0b5001369299575cb475b838a30ee25ef050
SHA256

1416777e38019b0da4ea0b7ec7bfc9e35dfb8c1e497b61ecda041bf970098246
SHA512

117c8de4031da987fb3756287bef1d82903e3723837c34b3fbc42830ce2385c1a88771fa5fab55c8803503ff2d745c2e6102c398913e8575fdbd7362298eeadc
SSDEEP

192:1/pkmEDIutrdG3bf4WNvPheJBv8XOlUj/KiNOGdz7Fg:1QRtkLCLlELNOEO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae124d5bab38396c7ea448fb73e73f59_JaffaCakes118

Files

ae124d5bab38396c7ea448fb73e73f59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b6b041e7cb7b4bc5a6eb4c2fd98a2c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
isprint
__p__fmode
_XcptFilter
_except_handler3
_controlfp
ispunct
isspace
isupper
isxdigit
ldiv
_exit
_c_exit
atoi
sprintf
isdigit
time
isgraph
__set_app_type
islower
__p__commode
printf

kernel32

GetStartupInfoA
GetTickCount
SleepEx
GetLocalTime

user32

wsprintfA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shlwapi

SHSetValueA
SHGetValueA

netapi32

Netbios

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE