fd5002db8c9a046f7136fbcc31e11cf9_JaffaCakes118 | Triage

Sharing

General

Target

fd5002db8c9a046f7136fbcc31e11cf9_JaffaCakes118
Size

13KB
MD5

fd5002db8c9a046f7136fbcc31e11cf9
SHA1

95701aa5bf314f7b458aa258491e2fde608ad645
SHA256

b707515aece1f3a13e00bcb5293bdd68e4c70ae5ccb770c850f8b89574c50cc4
SHA512

5865b13d7d280bcec9981d41a5dfb3ab5f7bc2d4952164bf9a0d1e97c22ab73fbbc2712fc29f858061f9e56327f37f9ceebdd101f80a66a58884b47e5e2b1235
SSDEEP

192:xN/sZRyAhfXLs5uro1+SvsnKH/wOlRYjnEtpmgH7DOCj:xNEbFfXgsrofUOCj4pnDOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd5002db8c9a046f7136fbcc31e11cf9_JaffaCakes118

Files

fd5002db8c9a046f7136fbcc31e11cf9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

8b8de558f04a990758560da24048e8d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

wininet

GetUrlCacheHeaderData
FindNextUrlCacheEntryA
FindNextUrlCacheEntryA
CreateUrlCacheContainerW

msvcrt

__toascii
__RTCastToVoid
__unDName
__badioinfo
__iscsymf
__argc
__crtLCMapStringA
__pioinfo
__unDNameEx

shell32

SHBindToParent
SHFormatDrive
DragQueryFileW
SHGetDataFromIDListA
SHGetPathFromIDListW
StrStrA
ExtractIconA

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE