da12fd5d9a52775c737621c413302581_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da12fd5d9a52775c737621c413302581_JaffaCakes118
Size

20KB
MD5

da12fd5d9a52775c737621c413302581
SHA1

3d72bacd7085fca4a7ff8b79d3672c1bc24ebab5
SHA256

463b88e145a00c175b293bfaaf02c5cbd8b8aa81f9b062babe1fb376cabe4ddd
SHA512

768b387509955ff3b844bb81aa99f9651280eb01bbf60659213f792987c04f6a09768b00f86a2e021d3f3aa077997294dc9257325d77bd6213d2b1c3b935308f
SSDEEP

192:BhId0N55hj8ZINP7xa5IBSlOnfkjzP1oycLdtYqQ9Z1:fI2N13BqOn831CBy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da12fd5d9a52775c737621c413302581_JaffaCakes118

Files

da12fd5d9a52775c737621c413302581_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2454022a464bd515d372cdd63e6ade44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessA
WriteFile
CreateFileA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
rand
srand
_except_handler3
_acmdln
__CxxFrameHandler
atol
_exit
_XcptFilter
??3@YAXPAX@Z
??2@YAPAXI@Z
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
time
exit
_itoa

wininet

InternetOpenA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetQueryDataAvailable

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ