3d3d93f02bb7786b3c46e3aaf3c94a86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d3d93f02bb7786b3c46e3aaf3c94a86_JaffaCakes118
Size

20KB
MD5

3d3d93f02bb7786b3c46e3aaf3c94a86
SHA1

fb0f571eba59fa52cd0232d7d9010591a6757bae
SHA256

154b8259ff1d82b221772d3c00a2ca0fb4bd4606836f2005d215f7e02ff9fe42
SHA512

b447e5c198283edadcdb9adbe33021ac295f38456c1be26f15c9b0bfdc4e99230e0134605f5db9cd8f76f8c31d431a7e579195e579273408bf154e9eecce1d56
SSDEEP

96:4WdI6F2Uj4c8rhz1rhTnz5enM+2SO2z5+POetLlRsWBRT11z5j90Fxt:4WDFXjOhx1E72PHfRl+iRT11lJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d3d93f02bb7786b3c46e3aaf3c94a86_JaffaCakes118

Files

3d3d93f02bb7786b3c46e3aaf3c94a86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27017f173055a24fd9cc53254ecb4c0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapFree
IsBadReadPtr
DeleteFileA
CloseHandle
WaitForSingleObject
CreateProcessA
GetStartupInfoA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

urlmon

URLDownloadToFileA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE