df3361e8e306cd770b47dc3717bfe8af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df3361e8e306cd770b47dc3717bfe8af_JaffaCakes118
Size

10KB
MD5

df3361e8e306cd770b47dc3717bfe8af
SHA1

fcc6d1a0ef5d46ea4d133969b6ba43b6ed4a6cbd
SHA256

66ee18e05b2d9adf7059cbfc19364d9f46c7071efaf9f9096e377a9c470ba339
SHA512

6d9bed32205c439e07d3a440dc0010f317a62bfc92accfcb2369efbdc5bc65e67c90b3be6c9686be955c2bf5ad9a13fb0cafbd428483f9cb345de9baafa4cddf
SSDEEP

192:Hn1JuQJ1r1QfdbRgQoaK/aFtTrbGspaqL2YLLrtitiLDqydVPbQaR:H1sI12dtoynb5LLLrtNLDNTQY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df3361e8e306cd770b47dc3717bfe8af_JaffaCakes118

Files

df3361e8e306cd770b47dc3717bfe8af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26efb390bf158519b4cc72f258e4b428

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetTempPathA
GlobalAlloc
GlobalFree
WinExec

urlmon

URLDownloadToFileA

Sections

.text
Size: 120B - Virtual size: 120B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WYCao
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ