JaffaCakes118_4856bcbb93b47f38216f0b52ea7a59b7 | Triage

Sharing

General

Target

JaffaCakes118_4856bcbb93b47f38216f0b52ea7a59b7
Size

70KB
MD5

4856bcbb93b47f38216f0b52ea7a59b7
SHA1

a97deb2cc3fa371ef54fdf593538c6c9a8372b94
SHA256

61487947cbe11c645723bda8a7d15767d2eddafb90003b5aa7e9bf6d72c60fb3
SHA512

d48edaf9b91288722fc500d545db456eeabd0148c20da47b78f0f2b295b07c89ef4e8fa7b68f20d99c259f52f3d337783ac48621332ee9b318f3791acc4e4846
SSDEEP

1536:qygUmA0leANbNoAWanpuXjs2zcsHnYpw8PcidvinYGueln2Lq:qxUmdleANKAWapYzcmYlnvizuqnZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4856bcbb93b47f38216f0b52ea7a59b7

Files

JaffaCakes118_4856bcbb93b47f38216f0b52ea7a59b7
.exe windows:4 windows x86 arch:x86

86f9dedc4246de1a9ec57fe8ba672a8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
UnmapViewOfFile
WritePrivateProfileStringA
GetPrivateProfileStringA
Sleep
VirtualAlloc
GetModuleFileNameA
ExitThread
CreateThread
SetErrorMode
LoadLibraryA
GetProcAddress
lstrlenA
VirtualProtect

msvcrt

memcpy

user32

wsprintfA
MessageBoxA

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 65KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE