d9aa76c82309296452536894962df922_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9aa76c82309296452536894962df922_JaffaCakes118
Size

3KB
MD5

d9aa76c82309296452536894962df922
SHA1

bb254293c91382fdd8eaeafcc3079349aa2b80fa
SHA256

ee23d60b99bf420c51ee6ee61418a4b1daab8df7873b8967ee8ba4e5a57d8a54
SHA512

450eee21fc71a5aa3d65eab6319cfcb08898d942c3eba3d8b59fd7fe35337591e65fdb65256cbf06487718c5b20692bfbb4c6debe6a131fb7ec4b5b2fc466cf0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9aa76c82309296452536894962df922_JaffaCakes118

Files

d9aa76c82309296452536894962df922_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87b823b8f10cd3192fb4212f93812203

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

shell32

ShellExecuteA

kernel32

GetLastError
WriteFile
Sleep
ReleaseMutex
GlobalFree
GlobalAlloc
ExitProcess
CloseHandle
CreateFileA
CreateMutexA

wsock32

gethostbyname
gethostname
WSAStartup

Sections

.text
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 602B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE