b1894545b252b7cbccbb2dd078e4b398_JaffaCakes118 | Triage

Sharing

General

Target

b1894545b252b7cbccbb2dd078e4b398_JaffaCakes118
Size

66KB
MD5

b1894545b252b7cbccbb2dd078e4b398
SHA1

f269c3bd242ed796415622bbd5e3f91f377c2fce
SHA256

a42b345c720f34f9ae5a5402a13243dcdf682dff0c16d96bbed5aee44a6a358d
SHA512

0693baa7b2046c03b9556ade37392ef8633d4d13f6c5a9fb2f163c753da41bddf7450a6aeb59469629f175b198887ec5817758f9e73aefe14f9003cb3f37690a
SSDEEP

1536:I3nxidg144MlrAWYOGDRq0w0jUjnF4W5:IX11CPqRq0BjUjnv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1894545b252b7cbccbb2dd078e4b398_JaffaCakes118

Files

b1894545b252b7cbccbb2dd078e4b398_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7849dd320fe2aab7ee12a2d021bcf41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FtpFindFirstFileA
FtpPutFileW
GopherCreateLocatorW
FtpCreateDirectoryW
CreateUrlCacheContainerA
GopherOpenFileA

urlmon

CreateURLMoniker
URLOpenBlockingStreamA
CoInternetParseUrl
URLOpenBlockingStreamA
UrlMkBuildVersion
CoInternetGetSecurityUrl

user32

DrawIconEx
EnumWindows
DdeNameService
FrameRect

Sections

.text
Size: 39KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE