d62cd4ad2a919b6acfa6d49d446dffdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d62cd4ad2a919b6acfa6d49d446dffdb_JaffaCakes118
Size

19KB
MD5

d62cd4ad2a919b6acfa6d49d446dffdb
SHA1

e399c9be301adec396a631441d71054ad88e0dee
SHA256

8b88dc84deb3118d6e514ae1c270f8742d214872cb18e914a79eef2684aaed5d
SHA512

e5ed28087c72abd8c0d4a57774462fa37e008c133dff9091e5aa8d5713607428d92e61bd4eb2fd8725239b451c07a8e75b1e7b8b9b74c7b23371edcb4d576c6e
SSDEEP

192:urqyyyR665ajlDoGxQoQQhuI1c/Q0oGxQooKf4HGxQhuI1c/Q0oGxQooKcPKojiX:urVjajZHC3Hm2yDvlh5Jd39OJgoc51

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d62cd4ad2a919b6acfa6d49d446dffdb_JaffaCakes118

Files

d62cd4ad2a919b6acfa6d49d446dffdb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7276a74b59de5761801b35c672c9ccb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameA
GetTempPathA
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetProcAddress
GetModuleFileNameA
GetShortPathNameA
lstrlenA
Sleep

ws2_32

gethostname
WSAStartup
WSACleanup

advapi32

RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegSetValueExA

wininet

HttpSendRequestA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile

msvcrt

atol
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
atoi
strcat
strcpy
__setusermatherr
fflush
??3@YAXPAX@Z
fwrite
memset
fopen
strrchr
??2@YAPAXI@Z
fclose
sscanf
_purecall
strlen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE