bdc52270eaf719d3f0d9cd50b4437969_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc52270eaf719d3f0d9cd50b4437969_JaffaCakes118
Size

30KB
MD5

bdc52270eaf719d3f0d9cd50b4437969
SHA1

7babc727568a4774c3de3bab9a5bf0cb6e56b7e9
SHA256

8d9704b24f4804f0e759955e4ec63b7d149719bf52b1cf95a8e38fad25ffe0dd
SHA512

5df9b7d9c65c414a4b5b17a8ad3fed69130da76ffd13ac2d460602164c333a2ff2d18eeb5b2fc0c6d52d81732dfc50a8904edffb2e1859e423a3922ce1e5986d
SSDEEP

384:RawAEGkQyyvzhwRQ9HdW0syz/K1nap7VBkLmfgLZKx+FKCyfvhWnoy/W:96XNzhFsyz/8Obfg4x+FKCMWnoy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc52270eaf719d3f0d9cd50b4437969_JaffaCakes118

Files

bdc52270eaf719d3f0d9cd50b4437969_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c60ff93d923b41321039b5f82dd1908

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
GetComputerNameA
SetFilePointer
ReadFile
GetFileSize
CloseHandle
SetUnhandledExceptionFilter
GetTickCount
GetTempPathA
GetProcAddress
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
WriteProcessMemory
GetModuleFileNameA
Sleep
GetLocalTime
GetVersionExA
ExitProcess
HeapFree
GetProcessHeap
HeapAlloc

user32

wsprintfA
SendMessageA
FindWindowA

advapi32

RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

wininet

HttpSendRequestA
HttpOpenRequestA
InternetOpenA
InternetConnectA
InternetCloseHandle

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE