e9c69ee7b0733f28f4406923ce8e305b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9c69ee7b0733f28f4406923ce8e305b_JaffaCakes118
Size

8KB
MD5

e9c69ee7b0733f28f4406923ce8e305b
SHA1

d0c98b02dd1cadbc00e3043dd2b79ef747e2ab67
SHA256

86ca6dae54339ecc1bec9f5fedc58fd7646a6d6859b23a1d266060e8d129eeba
SHA512

9b603f90dbf614534c4f31905be0fb4da8ba6227968cc3ecafe4ae0c79fa89f33b7a7c0d64cb637a882d5654ec6cf3d38202c65065e2ed7f3f086bec12251860
SSDEEP

192:nqsf7SYVV+xBVzrrrrrrrBN39jnjnjnjnjnjnjeB1NLWqccysMPKnxT:qiip5d9jnjnjnjnjnjnjWttylPKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9c69ee7b0733f28f4406923ce8e305b_JaffaCakes118

Files

e9c69ee7b0733f28f4406923ce8e305b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99b83e42dca5d2bd2b97d560051d218c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreak
DisableThreadLibraryCalls
EndUpdateResourceA
EscapeCommFunction
FlushConsoleInputBuffer
GetCPInfo

msvcrt

?_query_new_mode@@YAHXZ
perror
setlocale
strncpy
strcpy
tmpnam
ungetwc

urlmon

HlinkGoBack
URLOpenPullStreamA
UrlMkBuildVersion
GetClassURL
GetMarkOfTheWeb

user32

ClipCursor
CloseWindowStation
CreateDesktopA
DlgDirListA
DrawCaption
EndPaint

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE