0044c00d0be6228f2720fd14242f1fc3_JaffaCakes118 | Triage

Sharing

General

Target

0044c00d0be6228f2720fd14242f1fc3_JaffaCakes118
Size

12KB
MD5

0044c00d0be6228f2720fd14242f1fc3
SHA1

49d90affb8432fc0127f8e62fd7256a3abc27411
SHA256

12d77feb40f5262e70e420fce7aacd33fc036869166dc9a33c6a3d708980a898
SHA512

ca0f8ff5669820a25af41ac1918d4b8952f931dbf1a8669ec89d643de9f7becac58cbb1f2eac1ee1dd5d37c8e6df022ff181449c32698a221f7d37390f3da87d
SSDEEP

192:6cu22ecSv9xu2wLwL/Ci3qxm+dAh5DBu/QSi6biu9jCqTjrxnhW/WFODloOi7v9R:6/22eP9xu2Lq5G3Bug3u9mGjrRh4DIvP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0044c00d0be6228f2720fd14242f1fc3_JaffaCakes118

Files

0044c00d0be6228f2720fd14242f1fc3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d75b0257e1577311d483e337747ee494

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

GetClassFileOrMime
GetClassURL
IsJITInProgress
RevokeFormatEnumerator
UrlMkBuildVersion
DllCanUnloadNow

user32

CheckMenuItem
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

ntdll

CsrGetProcessId
DbgUiStopDebugging
LdrEnumResources
LdrFindResource_U

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE