146307ced1851c7d270a3fa842365b41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

146307ced1851c7d270a3fa842365b41_JaffaCakes118
Size

13KB
MD5

146307ced1851c7d270a3fa842365b41
SHA1

01e272eebf38d7542dfea0c8a74d8184b7a56d22
SHA256

83f01dcbcccfa54c28b111e32e9dfa863b32f7d0052b7676ac9207e139f6b41c
SHA512

06c3152778caa611a7f5fd6d0638b204e11daaa85d2350566b0d860c2a9d223dd8506ed07cac28f3f3abe6fcabaa3462e9547d1f181b2e12a1176991a1d8cc88
SSDEEP

96:ZRm3QC3oSXGdTfwIqYwnumr4CX/Hx/HfpV5MI32gopsiS16sJLqyAW72YpY+KVBE:XiQC3oSWdHwnzr9V/bkH5S1X0q7UFPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
146307ced1851c7d270a3fa842365b41_JaffaCakes118

Files

146307ced1851c7d270a3fa842365b41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8154af1ad3da1ac3c8e822c46a63f919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
GetProcAddress
LoadLibraryA

user32

wsprintfW

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ