56605a471aa25f6091ddc6e7586de146_JaffaCakes118 | Triage

Sharing

General

Target

56605a471aa25f6091ddc6e7586de146_JaffaCakes118
Size

11KB
MD5

56605a471aa25f6091ddc6e7586de146
SHA1

e771c0659385c55906e7f342ae9e583629387ba3
SHA256

ef61c68113bf21e5f16ad4529ad24165f810114403cfa83b4c39cb6a573e9055
SHA512

d1844a874c1f07dee39b7110c0d7dd5a8f0e07eb4713fb6ea3de50226905d9beee1c265920e113389c5ced9342eae91e0abe454d573fb9ee57cdb83991994ef9
SSDEEP

192:4qwbdlbpCsIp197fQ9zTwyvk+8kxV4t72tSaRde4aJHTqO76Zoeh0GUD:4NbdllCsIpTQe5+Z4t72tSaRamO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56605a471aa25f6091ddc6e7586de146_JaffaCakes118

Files

56605a471aa25f6091ddc6e7586de146_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2dda9aaddc0f98ac7c6b6f06832e26d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGenKey
CryptHashData
CryptSetProviderExA
DeleteAce

user32

CloseClipboard
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

urlmon

GetClassFileOrMime
GetClassURL
IsJITInProgress
RevokeFormatEnumerator
UrlMkBuildVersion
DllCanUnloadNow

Sections

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE