b2206682f8950dd3bd21b8a9619ce09d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2206682f8950dd3bd21b8a9619ce09d_JaffaCakes118
Size

81KB
MD5

b2206682f8950dd3bd21b8a9619ce09d
SHA1

54161867ad66280d350e0333e4f70b653a523969
SHA256

810e4e64ce8340e32f0cae4fa81b1b0d15b1db2a62fe753f24fb04dd1fee84fc
SHA512

fe23542e5730fd94083f368cb0a82d63bb2bdd7a1066b8a4743f470c68a29b91b19ab9bd6c933135c482e54b3a8e2cb307fc491b722291daa1566920c926d0ac
SSDEEP

1536:pvmFs8dD0N5BGD1WvijOT8vdMlJFnbOBBlBgjLEX0tyoO1gSt:pms8dD0N5BGD0gOTuIxmEoow

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2206682f8950dd3bd21b8a9619ce09d_JaffaCakes118

Files

b2206682f8950dd3bd21b8a9619ce09d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1334b4875533d4af0fc98e174ab0b2c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
IsBadWritePtr
GetVolumeInformationA
GetComputerNameA
GetTempPathA
ExitProcess
TerminateProcess
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
CreateProcessA

user32

wsprintfA

shell32

SHChangeNotify
ShellExecuteExA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA

msvcrt

strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
atoi
atol
_except_handler3
strncpy

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE