d209189947ad08a017da30b698eb37e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d209189947ad08a017da30b698eb37e6_JaffaCakes118
Size

104KB
MD5

d209189947ad08a017da30b698eb37e6
SHA1

dc79486449e98102b838ae388f60110f2341a071
SHA256

ff8b98881ed46b34646e59adc8b47f2987f26290a950c1be38947ab14afca0c0
SHA512

b7fbee6581550423f278614148e757ffc7d5810353aab215ce7d75ef475baadb7cc2dfe005abee9134b061f78f1a82bb97bfbdc6b6ec23502b61f6c444dd8b7f
SSDEEP

3072:M7Xw0HfS/4cSLzmcomh/EyvDqaAj1TRVJ:M7gyf44LLzmcoGsiGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d209189947ad08a017da30b698eb37e6_JaffaCakes118

Files

d209189947ad08a017da30b698eb37e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0290ba3e115b4c4c0e3246d4b7b7ced4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
CallMsgFilterA
AdjustWindowRect
CreateIcon

wininet

InternetOpenA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

URLDownloadToFileA
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE