faa0922f2d6098e8b6a2ad47f06eef85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa0922f2d6098e8b6a2ad47f06eef85_JaffaCakes118
Size

24KB
MD5

faa0922f2d6098e8b6a2ad47f06eef85
SHA1

840fa3f6cda9e35005ef1ea12decdd4a9f8fe428
SHA256

17491d6c37cbacc8875685fab89c6e93a555d65ff82a0533be60adf6424a71c3
SHA512

de8f5b60db5cdd84e885d81d40b97d5d025dbbb63c35fa844b486b06129a5c8aca9a9b829c306377d9745f70352c9c286cb008a48e96dd94d141167df4a74b5d
SSDEEP

192:dpJn8in9rRLssQMyX5HSYFY0y0Y0mOe4sAL9eytSSWsP1oyA2KQ9Z1:dXz9qsQp5pFy0ZKEeytSS31i2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa0922f2d6098e8b6a2ad47f06eef85_JaffaCakes118

Files

faa0922f2d6098e8b6a2ad47f06eef85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4414ee8e91389fde2f23813fbc535ae6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetLongPathNameA
CreateProcessA
CreateFileA
WriteFile
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyA

msvcrt

isspace
ispunct
isprint
islower
isgraph
isdigit
sprintf
rand
isupper
time
_except_handler3
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
isxdigit
srand
_itoa

wininet

InternetQueryDataAvailable
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ