b0d5231df86e0223a0c6e6d946ef860e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0d5231df86e0223a0c6e6d946ef860e_JaffaCakes118
Size

163KB
MD5

b0d5231df86e0223a0c6e6d946ef860e
SHA1

37cb04ba68d963253bd4d75cb26f727680988e85
SHA256

2332e676028bb9bbed57c52dac4474480485846a3e1c5f5cb679ea8ef64003c8
SHA512

2775e3419534e50cadc348faa19e175aa81cad2292fe8022e552f5d158ca64e136f48009e22e470c22d2d0a44b40ee5228ee4ab212fea7662ed9f7943da4df03
SSDEEP

3072:ZcKHygatHPIaFYbX+lFpaEWHZqqIyAMaB6PBM2Q1dMWOjlmp16SGSPiOP:ZcSygAIZb+tK5qqNm1d5QVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0d5231df86e0223a0c6e6d946ef860e_JaffaCakes118

Files

b0d5231df86e0223a0c6e6d946ef860e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72562c21745830d31343814dda230283

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

wininet

FtpPutFileA

user32

GetKeyNameTextA

gdi32

CreateDCA

advapi32

RegSetValueExA

ole32

OleRun

oleaut32

SysStringByteLen

Sections

.text
Size: 138KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE