d989b34b32ac0b74a02476965d9ad3f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d989b34b32ac0b74a02476965d9ad3f8_JaffaCakes118
Size

14KB
MD5

d989b34b32ac0b74a02476965d9ad3f8
SHA1

c5e8d3d146c8f770460a3fa05a4a38f9fd79aebd
SHA256

68e133a4f0b09a2d9841e75b2294246c949e0f358d7db94ed6dd9157527797d6
SHA512

8a0f1db9fd8e74dccd885edffb04b50c111ac2662fe6f28ecb39e28e2e395a1d774c0cd65fa958bd4429bf1237c8810f0be01425fa8b96cb6f8a5dfc3d25be7d
SSDEEP

384:urVacn7SIpKOiBblCCCCCCCtwBBi1cc7ppPOMV:urV/hKHnCCCCCCCuBzcVpPO2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d989b34b32ac0b74a02476965d9ad3f8_JaffaCakes118

Files

d989b34b32ac0b74a02476965d9ad3f8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b4e3f70b6ea4a4966706bc977170db22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FindNextUrlCacheEntryA
GetUrlCacheHeaderData
FindNextUrlCacheEntryA
CreateUrlCacheContainerW

shell32

SHBindToParent
SHFormatDrive
DragQueryFileW
SHGetDataFromIDListA
SHGetPathFromIDListW
StrStrA
ExtractIconA

msvcrt

__iscsymf
__argc
__toascii
__RTCastToVoid
__unDName
__badioinfo
__crtLCMapStringA
__pioinfo
__unDNameEx

Sections

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE