ce77c3439e7d6eeee685005e141ba967_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce77c3439e7d6eeee685005e141ba967_JaffaCakes118
Size

3KB
MD5

ce77c3439e7d6eeee685005e141ba967
SHA1

43bc00b76650671395737f1963a648ff11ac8c63
SHA256

5c20023d996dd3154500043cb0357d97e4d060e56c671c70b7a4035e69aac8fd
SHA512

7c74d4cd82137ff82ce275c56d000fc49117da73a2f97f38de9b5b30e9e2ffc55ed54a447012587b756eb73df7b919598af99f632e405196b16f37777d8da160

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce77c3439e7d6eeee685005e141ba967_JaffaCakes118

Files

ce77c3439e7d6eeee685005e141ba967_JaffaCakes118
.exe windows:4 windows x86 arch:x86

00a5a506a0c0c80b072108e1f08e3d10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenA
HttpOpenRequestA
InternetSetOptionW
InternetWriteFile
InternetConnectA
HttpSendRequestExA

kernel32

lstrcpyA
DeleteFileA
CreateFileA
GetFileSize
CompareFileTime
GetWindowsDirectoryA
ReadFile
lstrcatA
FindFirstFileA
GetLastError
FindClose
FindNextFileA
CloseHandle

advapi32

RegCloseKey
RegFlushKey
RegOpenKeyA
RegSetValueA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE