d662131b7cf93af2223f4270a3166d80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d662131b7cf93af2223f4270a3166d80_JaffaCakes118
Size

66KB
MD5

d662131b7cf93af2223f4270a3166d80
SHA1

e07b4f1767a92bb1d11118beeaa058500eaf4be1
SHA256

0d6c18b4d01ecdb2a922b0c12250ea9821b9e04402120024e2a704c2d9227bee
SHA512

cb4c99bd210f32f4512ebf8e429fcfbbdd86c0b7d8815d8343018506478544ef47e46493bcfad4fa888087a13ba9083a4a9df571f6eb0c018bf76d9cc1917521
SSDEEP

1536:c4HYm3ajkTXWeIdH6VgzvzFY3rOveYobqqWEGqSut:tHYwxTGeIdCsvzY1YobDWEj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d662131b7cf93af2223f4270a3166d80_JaffaCakes118

Files

d662131b7cf93af2223f4270a3166d80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56ab617e3eee5a022ac411513e913f9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumWindows
DdeNameService
FrameRect
DrawIconEx

wininet

FtpFindFirstFileA
FtpPutFileW
GopherCreateLocatorW
FtpCreateDirectoryW
CreateUrlCacheContainerA
GopherOpenFileA

urlmon

CreateURLMoniker
URLOpenBlockingStreamA
CoInternetParseUrl
URLOpenBlockingStreamA
UrlMkBuildVersion
CoInternetGetSecurityUrl

Sections

.text
Size: 39KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE