00d0d635e5fbffc84fc769422e37fc7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00d0d635e5fbffc84fc769422e37fc7c_JaffaCakes118
Size

10KB
MD5

00d0d635e5fbffc84fc769422e37fc7c
SHA1

4f6817cd537c87445cade86f7c97ec282d90212b
SHA256

c59b2dd1022bf821f39461610cba56ba3371df62a4e24fa22f6e09b948d80c40
SHA512

f2ffd786f1af6fd800b3effb305bf239bfc8ec0c67053d2c6b1af9f8bab6e4f95789d52da436ad52800623e0e16ba407771e91ace3dc81f698650706848afb7b
SSDEEP

192:TeLrH8lMP4A749j4xMfCiX2jqxuaawx1aEYs4CEVBXEQV:aHwG4As90+qiX+qhawLW8MBUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00d0d635e5fbffc84fc769422e37fc7c_JaffaCakes118

Files

00d0d635e5fbffc84fc769422e37fc7c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3a4e70ee7daca1d75da08c4e4f191766

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
ForceNexusLookupExW
FtpRenameFileA
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
ForceNexusLookupExW
FtpPutFileA

user32

AnyPopup
CheckMenuItem
CheckMenuRadioItem
CloseWindow
CopyRect
CreateIcon
DragDetect
DrawEdge
EndPaint

kernel32

CloseHandle
ExitProcess
TerminateProcess
CreateFileA

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE