0a1fef870b2af07cefb793e1bda80eea_JaffaCakes118 | Triage

Sharing

General

Target

0a1fef870b2af07cefb793e1bda80eea_JaffaCakes118
Size

25KB
MD5

0a1fef870b2af07cefb793e1bda80eea
SHA1

8595628180494de208e2145184ac505a500e50e1
SHA256

ea88ee78092758e034aec155c9ed61dc7501910c52123df720341bc874f75232
SHA512

94435656189d6e344dc056a53919ef1f4b3fbffd8ad1949d043cae779c3cfd74c0a9a3a63ffc0c07c8fec422be6b0ea7c4245a6d7d3096d81331e1871881b650
SSDEEP

768:6RVtNcoHPHlQY0O0lnvuvOeNpzK66vvFb:6RVtKUr0F4OeNpzK6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1fef870b2af07cefb793e1bda80eea_JaffaCakes118

Files

0a1fef870b2af07cefb793e1bda80eea_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b626fe804ddfbf74a006a97da35f778c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CloseClipboard
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

ntdll

CsrGetProcessId
DbgUiStopDebugging
LdrEnumResources
LdrFindResource_U

urlmon

GetClassFileOrMime
GetClassURL
IsJITInProgress
RevokeFormatEnumerator
UrlMkBuildVersion
DllCanUnloadNow

Sections

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE