edcc240167e35077c60f473e962e2e48_JaffaCakes118 | Triage

Sharing

General

Target

edcc240167e35077c60f473e962e2e48_JaffaCakes118
Size

11KB
MD5

edcc240167e35077c60f473e962e2e48
SHA1

354bb7e42f870c2803f02f53b61b5b356cd2b14d
SHA256

eaffcfda039f36be5d2cfdbf23b9652591f198bb662693b3447f8e68d25b0401
SHA512

980d0042d05e6c1f98e0226af75c296c02ab44c55ee25090e3d73105f4b8d4fe54f09c441fe379342fcffe9719e5d27ff9ef986aecd86bc19d756ee1f2f965bb
SSDEEP

192:MfmuL/drfkPauGgVR2PYylm0zQ6KP1oynY7xWvRNtN:MfmK/hfkPaJgD2Px5U1Kg1N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edcc240167e35077c60f473e962e2e48_JaffaCakes118

Files

edcc240167e35077c60f473e962e2e48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8be407221afae6420ff02fd656f7717b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
CopyFileA
CreateThread
GetModuleHandleA
GetStartupInfoA
WaitForMultipleObjects
CloseHandle
GetModuleFileNameA
GetWindowsDirectoryA
CreateDirectoryA
Sleep

user32

EnumWindows
EnumChildWindows
GetClassNameA
SendMessageA
GetWindowTextA
MessageBoxA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

shell32

ShellExecuteA

msvcrt

__setusermatherr
_controlfp
_except_handler3
__set_app_type
atoi
fclose
fprintf
__p__fmode
strstr
fgets
_snprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
fopen
_adjust_fdiv
__p__commode

wininet

InternetReadFile
InternetOpenUrlA
FtpGetFileA
InternetConnectA
InternetGetConnectedState
InternetCloseHandle
InternetOpenA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE