b6383db801d264841de9ec2ac0d52dea_JaffaCakes118 | Triage

Sharing

General

Target

b6383db801d264841de9ec2ac0d52dea_JaffaCakes118
Size

26KB
MD5

b6383db801d264841de9ec2ac0d52dea
SHA1

0415177d5a2a480dfcf05850cfe2338e4d283901
SHA256

9ac6044126ce1cf9f0a81bcc8cc8ec85be45d79609bd37a3fd1c14611229de72
SHA512

35a284245a494e7988764799a0a44c2b8247b4d77870dfd66c94cbed140b29f3ab8acf899fc468a668c34b5a703994c80e089a2c31c0de7a6477108d2fb11673
SSDEEP

768:CCiUvTvDxTABRjOz6/Kwr+dbps3tw+hVm56/al:TimxGwzsW63Twp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6383db801d264841de9ec2ac0d52dea_JaffaCakes118

Files

b6383db801d264841de9ec2ac0d52dea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

081b946f9077003cc0ce0b0c34c9fe59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

DeleteUrlCacheContainerA
FtpFindFirstFileW
FtpRenameFileW
GopherCreateLocatorW
GopherOpenFileW

Sections

.text
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 145KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE