fa47dd0e1da3e61a3e0dcd4afc0104ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa47dd0e1da3e61a3e0dcd4afc0104ec_JaffaCakes118
Size

90KB
MD5

fa47dd0e1da3e61a3e0dcd4afc0104ec
SHA1

e0d2db50aaebe2aded8ed090c739bc29989d3180
SHA256

5a1c4fb0a843bc12850424270aabe2022254903923e18812276ad44ddb91bfa1
SHA512

76e3963e6ccf43b267670cf1803dfd6823d5f3e7d68e49750b194f968444d6b8c28c2055659a94a4a842a09102d5f73768dd234e16773fe3e4605c0678ebaa93
SSDEEP

1536:suULaDGK6FJ/fc0U3X5ItM5CNSDWLVgnNemcMXOhg/sgrLAqM38b1++:IWDb67/q3nCNSUg7c0OhgUgX3a6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa47dd0e1da3e61a3e0dcd4afc0104ec_JaffaCakes118

Files

fa47dd0e1da3e61a3e0dcd4afc0104ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE