f05836f696d0783cc94b81b0ce2aa005_JaffaCakes118 | Triage

Sharing

General

Target

f05836f696d0783cc94b81b0ce2aa005_JaffaCakes118
Size

15KB
MD5

f05836f696d0783cc94b81b0ce2aa005
SHA1

8da00a39b0277eb329fd1b600d07c991e23f7197
SHA256

3e7f2221cc75e6350cb3421ab90525554a28a6576822f0d33f47e145213219cf
SHA512

ac6663be1c8946c9792c0538783c436aaeab84fa98e2c87177db52cd0873f19fb72b396ce3fb6c26e90d95593ce1228ecf6bca03b51dd9164e37fef5607b0fd5
SSDEEP

192:lCgb5ORR59fZFs1SaRDWb0RsjEFAJc7nH62z9FaJjRnS1nR/sgIjPt32EmAPGE8:lTesYatWb0RESniRneD+IA3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f05836f696d0783cc94b81b0ce2aa005_JaffaCakes118

Files

f05836f696d0783cc94b81b0ce2aa005_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b8de558f04a990758560da24048e8d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

wininet

GetUrlCacheHeaderData
FindNextUrlCacheEntryA
FindNextUrlCacheEntryA
CreateUrlCacheContainerW

msvcrt

__toascii
__RTCastToVoid
__unDName
__badioinfo
__iscsymf
__argc
__crtLCMapStringA
__pioinfo
__unDNameEx

shell32

SHBindToParent
SHFormatDrive
DragQueryFileW
SHGetDataFromIDListA
SHGetPathFromIDListW
StrStrA
ExtractIconA

Sections

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE