dcdd309ee46de14112db9a3bfcb2072b_JaffaCakes118 | Triage

Sharing

General

Target

dcdd309ee46de14112db9a3bfcb2072b_JaffaCakes118
Size

104KB
MD5

dcdd309ee46de14112db9a3bfcb2072b
SHA1

3a8441b896261c345d54b1c3e83df21fea582d5d
SHA256

b550086e1f715dd8d16da8f89991d008f9e1af898fcfa8417e812ec9673eaafa
SHA512

70da23a7021d4156cfaa711fcc3c56778399fa3f5b9e99713a28aee3400cb5c6ddc501b54a855ae39bbd4f9b783a65284dddf2f0f937fc2a330ea3eba208fc50
SSDEEP

3072:Yxwo9tcZF47G1aQMqiiN7S286Lv5zZHHS2+4J:Yxw6+ZFD1aQvg286L9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcdd309ee46de14112db9a3bfcb2072b_JaffaCakes118

Files

dcdd309ee46de14112db9a3bfcb2072b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE