d3e673c285ae1bdd5fabf54e13575217_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3e673c285ae1bdd5fabf54e13575217_JaffaCakes118
Size

90KB
MD5

d3e673c285ae1bdd5fabf54e13575217
SHA1

3becfb384df06fad6ec2c4310abc33a7ca0ad3b2
SHA256

25291dfe773a4527d91a1d05e5a7baad61b328ae10ce7b43de44e26f2be6661e
SHA512

3ff18db6c7f79390ae97472cd8db422e43784c04a20a8df4dbecadccd1b9e4281e438902bb80fb744cbd06d71f5468738b84413014db5c2233cbfcdf188ae4d1
SSDEEP

1536:0ktnpBaDGK6FJ/fc0U3X5ItM5C05NCORUvJYKnATFPhtjFvJvdOiPdhCvQLA:1vMDb67/q3nC0bVUoFPFxVOMdhCvQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3e673c285ae1bdd5fabf54e13575217_JaffaCakes118

Files

d3e673c285ae1bdd5fabf54e13575217_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE