ea1737ffe8cae6632b3285fb30ccc678_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea1737ffe8cae6632b3285fb30ccc678_JaffaCakes118
Size

7KB
MD5

ea1737ffe8cae6632b3285fb30ccc678
SHA1

a566104733a003e3fc791d57d1fbcb01e9f5fd6b
SHA256

768398f9aff07cb07ade136db18e8fea9163338d3713cf5411ea836bd4942c6d
SHA512

3ab15c4b790cd319c595c64354bdb17bbf33302bc3891c7d997a854748738a48805c439b9f24bd21f4b1c8515c04ea655a71dca0db00b0d7046760b7fc3daa73
SSDEEP

96:yO/tQKoXx33ywdhQq5n/LibgYPFXTSbgsiysOzafZ+Ptboyn/0rLAP:vtOSSQgnDJiFXvsdUZ+P1oyn/0AP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea1737ffe8cae6632b3285fb30ccc678_JaffaCakes118

Files

ea1737ffe8cae6632b3285fb30ccc678_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25fe393b46c26f0295f9f3689a2f6b62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

mfc42

ord815
ord561
ord823
ord825

msvcrt

__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
strchr
time
srand
rand
atoi
strrchr
__setusermatherr

kernel32

GetComputerNameA
DeleteFileA
GetModuleFileNameA
GetTempPathA
Sleep
GetModuleHandleA
CopyFileA
CreateProcessA
GetTempFileNameA
GetStartupInfoA
CloseHandle

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

urlmon

URLDownloadToFileA

msvcp60

??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ

Sections

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ