ffe66174277bf8b167763d351da5c6b4_JaffaCakes118 | Triage

Sharing

General

Target

ffe66174277bf8b167763d351da5c6b4_JaffaCakes118
Size

13KB
MD5

ffe66174277bf8b167763d351da5c6b4
SHA1

098beb1e82c9a0f47ce45b2b500bda327deef7bf
SHA256

f2958048f800b85d7af7a8753cf2899b8a23df017509737c775ba1f5114ba5c7
SHA512

040763067762672f98b27c8df7ad3d4222fd27d7378ac4eaf1f37630cc30e57921c5b530be2538dcfde3ab7596c0e4e84fa434c621c9f15d5c16d365fb4b2f2d
SSDEEP

96:ZRm3QC3oSXGdTfwIqYwnumr4CX/Hx/HfpV5MI32gopsiS1YKwI1yF4BUi7ytVBBn:XiQC3oSWdHwnzr9V/bkH5S1qi7Pvq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffe66174277bf8b167763d351da5c6b4_JaffaCakes118

Files

ffe66174277bf8b167763d351da5c6b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8154af1ad3da1ac3c8e822c46a63f919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
GetProcAddress
LoadLibraryA

user32

wsprintfW

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ