0125be57bc39f868c5720f495a2c95db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0125be57bc39f868c5720f495a2c95db_JaffaCakes118
Size

68KB
MD5

0125be57bc39f868c5720f495a2c95db
SHA1

40d98ea302b1aa6fa3d1e82b77b653a836b5b7a9
SHA256

d6871dcea28f36bbf0c464cd15a27572da6c399a5329691545b89db9776f9771
SHA512

51c2a3f434a26dca6100633e0afc822b731d8b552ba0d2e9ac901686b87030f1a29b647c93c9fdd248e0674772588d461410354cd0fccefcac066ed5d8714beb
SSDEEP

192:ISaSsNxqADGHZva2kGP1oy6ic4qwTKQ9Z1:batfOZ2w1kic4qwT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0125be57bc39f868c5720f495a2c95db_JaffaCakes118

Files

0125be57bc39f868c5720f495a2c95db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

424c8892c03c5d5025304a9beb608d28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameA
GetTempPathA
CloseHandle
WriteFile
CreateFileA
CreateProcessA
GetStartupInfoA
GetModuleHandleA

msvcrt

isdigit
ispunct
isprint
islower
isgraph
isupper
isalpha
isalnum
div
ceil
isxdigit
isspace
atol
_except_handler3
sprintf
atoi
srand
time
__CxxFrameHandler
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
rand
_itoa

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ