bace65f9e1c7cf78cadd83bc2a0e8d63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bace65f9e1c7cf78cadd83bc2a0e8d63_JaffaCakes118
Size

44KB
MD5

bace65f9e1c7cf78cadd83bc2a0e8d63
SHA1

0166acda3e7bc307ccc96a099eb494dff9ca9d43
SHA256

b20ad31abe06151bbe08c2b6917fd2c9cd3d00dc0aa0dd5fd123cf1a4562858a
SHA512

c3c119632bd67a183a2a19ef2e066e3c4ed0fa701a05959c282548a93bf38d6a63b21774d94cebea982c0890fcd55542d411cc09bc5587e7864dcef14e9dabda
SSDEEP

768:tcJttyK/1o2By2/J7OEsEZ5ikQX9EMh8a2fYvwo4:tgX1oiT9Ix9ERo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bace65f9e1c7cf78cadd83bc2a0e8d63_JaffaCakes118

Files

bace65f9e1c7cf78cadd83bc2a0e8d63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6234c268b63e93702b217de250ab797

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

kernel32

FreeEnvironmentStringsW
CloseHandle
SetStdHandle
GetStringTypeW
GetStringTypeA
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetLastError
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE