09c17a6efe37a1218ec33031f4ad3763_JaffaCakes118 | Triage

Sharing

General

Target

09c17a6efe37a1218ec33031f4ad3763_JaffaCakes118
Size

777KB
MD5

09c17a6efe37a1218ec33031f4ad3763
SHA1

17ea0ecd91f9560f586cdfa710bc17d76192f5be
SHA256

dc2cd973e6dfdcdc6896c967e53ba7fab1f86e360093b26478005f70a7979c2c
SHA512

16c0b7f42bbbd53d062af9398f33182aab9eb7651c84ba31c06943b1f70550bff4407f9eb0f8c56636c149d5910487500931d1acb5720ec8aa849f446084f24e
SSDEEP

12288:k1DYrdA51XhkbN+Hl46GALC8Car3TesjmVYhFLfT0xP9:kdY5A5pIKl46zLCd4KY5Al

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c17a6efe37a1218ec33031f4ad3763_JaffaCakes118

Files

09c17a6efe37a1218ec33031f4ad3763_JaffaCakes118
.exe windows:1 windows x86 arch:x86

eaf7c7d778b427cc143d8eb209c5f6e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
CreateProcessA
ExitProcess
FormatMessageA
GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetTempFileNameA
GetTempPathA
GetVersion
GetWindowsDirectoryA
LocalFree
MapViewOfFile
MoveFileExA
RtlMoveMemory
Sleep
UnmapViewOfFile
WriteFile
WritePrivateProfileStringA
lstrcatA

user32

MessageBoxA
wsprintfA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 1024B - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ