02e9adc8b6f47f372c137fa7b8209611_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02e9adc8b6f47f372c137fa7b8209611_JaffaCakes118
Size

352KB
MD5

02e9adc8b6f47f372c137fa7b8209611
SHA1

7b248918bcc8305a7092b52d1acc16bda5c9d2a1
SHA256

c9ede4fbad539b8aae1f5e81242c1625abb2b8cf7bdd51e8d9ea29ddbcd675b8
SHA512

6e419235843990ff5eedf110b710499ef0431f7d5f4a291d7793ef80ca3fa3c3f5853f8449e86060fb7943d1498d5164ee81e634c4b680f4866e40af60ace8db
SSDEEP

6144:PzG8nriOnW/rGgG1fKkP93v7m4lxF+FSVfcjNw/LVtetUyx:r1DYrMfK2l9gFMcjcYUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e9adc8b6f47f372c137fa7b8209611_JaffaCakes118

Files

02e9adc8b6f47f372c137fa7b8209611_JaffaCakes118
.exe windows:1 windows x86 arch:x86

eaf7c7d778b427cc143d8eb209c5f6e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
CreateProcessA
ExitProcess
FormatMessageA
GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetTempFileNameA
GetTempPathA
GetVersion
GetWindowsDirectoryA
LocalFree
MapViewOfFile
MoveFileExA
RtlMoveMemory
Sleep
UnmapViewOfFile
WriteFile
WritePrivateProfileStringA
lstrcatA

user32

MessageBoxA
wsprintfA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 1024B - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ