f1a6e10e5c27d1acc61fe674e2606f3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1a6e10e5c27d1acc61fe674e2606f3f_JaffaCakes118
Size

26KB
MD5

f1a6e10e5c27d1acc61fe674e2606f3f
SHA1

eb8d91b362b201b3e44643b88cc6d75de498cf71
SHA256

b0e50c9a7751b3c8f1f3a99731bc5beaf76c831f7d844491c6276e1ec51a3b4f
SHA512

5b4440af63f36dcc31ceff6ce7ada06183c483e1c15b7cad07419ab7953dda9e997ed6023a97ec6caf90238996c2effda8df4173a25d70d8709dac8c82f3840f
SSDEEP

384:ob3m6Kh0sbBR7WHrFRGK35twtY6LghZtL3XQ3PhhDJLcQPuEYKDTLpDGuMtKDM8:ob3ZcAHhRItXGtLnQ5hDJLZBfRGuM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1a6e10e5c27d1acc61fe674e2606f3f_JaffaCakes118

Files

f1a6e10e5c27d1acc61fe674e2606f3f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

801b480cf4dbe239c182eddc06994cf3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
VirtualProtect
GetCurrentProcess
WriteProcessMemory

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

wininet

InternetOpenUrlA
InternetOpenA

msvcrt

??2@YAPAXI@Z
sprintf
free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ