dd60214590e0b6cfa0e5b4db510abe9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd60214590e0b6cfa0e5b4db510abe9b_JaffaCakes118
Size

13KB
MD5

dd60214590e0b6cfa0e5b4db510abe9b
SHA1

1cb3148439c0bac2fdea93d88bd0bdea2aef1da2
SHA256

ae2df35f8b3f7077b8b6cd2e10da40ccc20705cd7a7d292680bb857731662ddb
SHA512

2064919c93311a32b18bcd5e370589e67bc602495759ad0fda43f962ea293bb200720d03ba9fe21790f82b88ca4e4bb28215dc037e1b3e7143d0e90f7b9215a3
SSDEEP

192:E5GH6MNlp6QZ5kgJHJAyZJg8D0KThxA+rAQE+tnJiOnp:E5GH6yZ5kgJpJgLa0Mp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd60214590e0b6cfa0e5b4db510abe9b_JaffaCakes118

Files

dd60214590e0b6cfa0e5b4db510abe9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1caf2a01007e2576c722b5ef5f4239d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetDateFormatA
GetLocalTime
GetTimeFormatA
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrcpyA
lstrlenA

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetConnectA
InternetCloseHandle
FtpPutFileA

advapi32

GetUserNameA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ