eb47f29b24ffb8f8979d256d9754acdd_JaffaCakes118 | Triage

Sharing

General

Target

eb47f29b24ffb8f8979d256d9754acdd_JaffaCakes118
Size

18KB
MD5

eb47f29b24ffb8f8979d256d9754acdd
SHA1

311ce0c9b48f6822ff6cdc4a996f7d95353acbfe
SHA256

15d416b1bccdbcb1303fce192b3368192e8d1e985a07590dc2dcd57d20759728
SHA512

8d3543924c122462d7caa20532bae9d038e6efc907ef3bb723f9e298bccbdb0896bb81e01bd9134b69d89297b5df9cafcde6ceb7e406b30701c315d276c6bd3a
SSDEEP

384:KTZmwBRPuRZqi4PRfSR/jHVeeLfgPqc+urDZRQcNtHu2:WZFv2RYtZfa/zV7kCBuffQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb47f29b24ffb8f8979d256d9754acdd_JaffaCakes118

Files

eb47f29b24ffb8f8979d256d9754acdd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3be39036e32db05591e8b4ab0a5ddd5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocalTime
GetProcAddress
LoadLibraryA
GetLastError
TerminateThread
SetThreadPriority
CreateThread
GetModuleFileNameA
GetTempPathA
DeleteFileW
CreateSemaphoreW
CreateMutexA
CreateFileMappingA
DeleteFileA
GetSystemDirectoryA
VirtualAlloc
VirtualFree
Sleep
CreateFileA
WriteFile
CloseHandle
DisableThreadLibraryCalls
CreateProcessA

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

advapi32

CloseServiceHandle
OpenServiceA
DeleteService
OpenSCManagerA
ControlService

msvcrt

strcpy
strlen
memcpy
_except_handler3
sprintf
strcat
strrchr
memset

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

buJrUhw
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ