53189752f9aa7c0d7d00f61c7374dc53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53189752f9aa7c0d7d00f61c7374dc53_JaffaCakes118
Size

5KB
MD5

53189752f9aa7c0d7d00f61c7374dc53
SHA1

d2274da0fbfadf16cd3ec7981fa6e31f05866c2e
SHA256

daed875f11a4e259d082052b3e13f4601ea6de5378f729db67d82e756118eed0
SHA512

c665115c5f508342bd117c39efa1ec05fec0452d3148aff16d4ec0f705b81e8195a34e1305f5c86949a19367647f10c793ecadcf65374435ad7f5a88631e5416
SSDEEP

96:ATNc51IhbxdOn5hxCf4eNBvMM9eNrAKtjD34Ol:z5MUnHS4loUtD34Ol

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53189752f9aa7c0d7d00f61c7374dc53_JaffaCakes118

Files

53189752f9aa7c0d7d00f61c7374dc53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8551bdf5f601d7160e30c1595b1c7c22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetSetCookieA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA

kernel32

GetModuleFileNameA
ExitProcess
GlobalAlloc
GlobalFree
CompareStringA
lstrlenA
lstrcpynA
ReadFile
SetFilePointer
CreateProcessA
WriteFile
GetTempPathA
lstrcatA
lstrcpyA
CloseHandle
CreateFileA

user32

wsprintfA
CharNextA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey

ole32

CoCreateGuid

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ