ef3cff52dc2364e35bd0e711d9396ffa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef3cff52dc2364e35bd0e711d9396ffa_JaffaCakes118
Size

5KB
MD5

ef3cff52dc2364e35bd0e711d9396ffa
SHA1

4434f5a89dab7cc8cc0adc7465122565472559fd
SHA256

8890c7408bad835bbe551efb959e714baa8c1d77898782f24f285a5808655831
SHA512

17b7cfb99dbd2aa59ccdfccb7810871a89ce8e4311c8bd620c44c193fef7d59214a467c9d44904fd2d0167684be6c429a222c2fc6638ee899523b5b8830d39ac
SSDEEP

96:HkJ0Fdmt1b+8Srs/CZ++SqpjZE8J/MWcDsE2Qma7E7Df0C/luJeAFJ8U6:Tz80sKtpLkWlE2Qma7E7DMEOT8x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef3cff52dc2364e35bd0e711d9396ffa_JaffaCakes118

Files

ef3cff52dc2364e35bd0e711d9396ffa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3038b721066cf8553b0030f5d061a48a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
DeleteFileA
GetTickCount
WinExec
GetTempPathA
GetProcAddress
LoadLibraryA
CreateFileA
ExitProcess
WriteFile
lstrcatA
lstrcpyA
Sleep
CopyFileA
SetFilePointer
ReadFile
GetWindowsDirectoryA
CloseHandle

user32

wsprintfA

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

shlwapi

PathRemoveFileSpecA

msvcrt

fclose
_itoa
sprintf
_except_handler3
strchr
fopen
fscanf
_stricmp
??3@YAXPAX@Z
??2@YAPAXI@Z

rpcrt4

UuidCreateSequential

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ