ff0ad4afa6bc61e4161ba099a53716b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff0ad4afa6bc61e4161ba099a53716b6_JaffaCakes118
Size

104KB
MD5

ff0ad4afa6bc61e4161ba099a53716b6
SHA1

535ab4bb6925be7147e51c64a78a3b3a7f03d39d
SHA256

5555a50cee94707a3543d3848f766df647fd9e82d69e5179ac622a1041cfa1e7
SHA512

ab53bae676c7ae58b80376da86ad0b578336c88558d1780cc789d92f074f488d32ec17d857ca187770e95bce907541fedbbe26addc14152e626493bb33f21809
SSDEEP

3072:S9hbRIqRJVnJum3feAEBxzd78YxLR4AzWP:Ep6qRJqaviZdVpR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff0ad4afa6bc61e4161ba099a53716b6_JaffaCakes118

Files

ff0ad4afa6bc61e4161ba099a53716b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE