0a7e6eb2aba9e06f18c8a2bb5f44bb02_JaffaCakes118 | Triage

Sharing

General

Target

0a7e6eb2aba9e06f18c8a2bb5f44bb02_JaffaCakes118
Size

9KB
MD5

0a7e6eb2aba9e06f18c8a2bb5f44bb02
SHA1

bf6e7202b7ac4d02b283c88d97d2b3a355c204fe
SHA256

f4fa88d4df94ebdeb3dca8e66f475364cccb37050d692549b78019e98515694b
SHA512

a3ffb87e9bb17a507c233c3c7f52ce015320da91438d5022ce79534a31c8326cedef290afe1c09e3accfc97e5c65371409d150077eb17f14b8a9ef9fe2e668ec
SSDEEP

192:3MZ7SYUBkIr+bK7jdh0jvN67POI2CrCM9Rva0Qizkjdiz7IiN6SLh:3zWIr+bK7jdqvN67mIhvRy0Q7jdOI4tN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a7e6eb2aba9e06f18c8a2bb5f44bb02_JaffaCakes118

Files

0a7e6eb2aba9e06f18c8a2bb5f44bb02_JaffaCakes118
.exe windows:1 windows x86 arch:x86

18317650a7f41977adf2a7533244a216

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AnyPopup
CheckMenuItem
CheckMenuRadioItem
CloseWindow
CopyRect
CreateIcon
DragDetect
DrawEdge
EndPaint

kernel32

CloseHandle
ExitProcess
LoadLibraryA
CreateFileA

wininet

DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
ForceNexusLookupExW
FtpDeleteFileA
GopherCreateLocatorA
HttpAddRequestHeadersA
IncrementUrlCacheHeaderData
InternetAutodial

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE