cfce8e09343cf227e6946a20a8703224_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfce8e09343cf227e6946a20a8703224_JaffaCakes118
Size

44KB
MD5

cfce8e09343cf227e6946a20a8703224
SHA1

42d2fae7cbf7ac1b70cd7b7fd7ccb4174facfdea
SHA256

4e5cb2e2de6553a790af7acf2bf2a7871552b0f34bf92690319a554444e78964
SHA512

7a79c4d53e1112f4153c98b042a4646c63a81245315ba686ffde47570424353434c9e58ea7d9bf62a20268be5ae91846c4ab472c40e4680d7778157fe4f5d0a2
SSDEEP

768:zAHovKzDoZFfd8OzYTU4QpIAHovKzD85D+TJRmS:WovKIZFfD/fovKc5D+TJA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfce8e09343cf227e6946a20a8703224_JaffaCakes118

Files

cfce8e09343cf227e6946a20a8703224_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9bc118c67f872308edd9d81042175c2a

Headers

Imports

user32

wsprintfA

wininet

InternetGetConnectedState
InternetOpenA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
InternetOpenUrlA

kernel32

lstrlenA
lstrcpyA
lstrcatA
CloseHandle
CopyFileA
CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
EnterCriticalSection
ExitProcess
ExitThread
FreeConsole
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetThreadContext
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
ReleaseMutex
ResumeThread
SetEvent
SetFileAttributesA
SetThreadContext
Sleep
TerminateProcess
VirtualAllocEx
WaitForSingleObject
WaitForSingleObjectEx
WinExec
WriteFile
WriteProcessMemory

ws2_32

gethostname
getsockname
htons
inet_ntoa
gethostbyname
ntohs
recv
recvfrom
select
send
sendto
socket
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
WSACleanup
listen

urlmon

URLDownloadToFileA
URLDownloadToCacheFileA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Sections

Size: 40KB - Virtual size: 40KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE