fd4aabd81bc3b1e68539eaade300ab50_JaffaCakes118 | Triage

Sharing

General

Target

fd4aabd81bc3b1e68539eaade300ab50_JaffaCakes118
Size

7KB
MD5

fd4aabd81bc3b1e68539eaade300ab50
SHA1

9926ea47669ed56248aa2832bc3d59fa43022f11
SHA256

47877f624c746f270ecb9fa2c29eb11be4e3c5218d23432a70cca266c89e1e56
SHA512

3b2e437585955d88e06fd0647c7cd68813fc5d8084243cf7d8e60d3c5a7fdca7febe4332ba00bf0afb362d4631dd9cacb0263bbaf42ac8361b60c9f4ce6788e9
SSDEEP

48:Sut1TDAtgwevMPZ+7m/QuhtiBt1Kmam67JRbvEut:VDwekh+7mIx1Kma/7JhT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd4aabd81bc3b1e68539eaade300ab50_JaffaCakes118

Files

fd4aabd81bc3b1e68539eaade300ab50_JaffaCakes118
.dll windows:4 windows x86 arch:x86

218a3d0359f7f2288d81dd615505fc5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

msvcrt

fclose
??3@YAXPAX@Z
fwrite
??2@YAPAXI@Z
fopen
sprintf
free
_initterm
malloc
_adjust_fdiv

kernel32

CreateThread
GetSystemDirectoryA
lstrcatA
GetFileAttributesA
CreateProcessA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ