1626c8d8390410753702a97f439db096_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1626c8d8390410753702a97f439db096_JaffaCakes118
Size

7KB
MD5

1626c8d8390410753702a97f439db096
SHA1

086a9a8e0a74a1485fdf47d73d9495ec90eac27f
SHA256

6127edb890b288918f00bf99092d149ea343f0151492bb529b862b6f412d4b84
SHA512

e9b969a73af0b9fe58108e28110f0de3d59b47d87d3d0b7c8fb5f61ba295223688eef2f62ec5e8719c935fca970b2da5728ec1e80a33b70e4954a3df97eb1ff7
SSDEEP

96:W9jotmw7jB/sb0xwwwG7dWs1iDr0k5A83bA8a/7ac53:W9umwBFw0cMuF38DR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1626c8d8390410753702a97f439db096_JaffaCakes118

Files

1626c8d8390410753702a97f439db096_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1973b8dbe8c55f3516ab1e48d0015959

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
RegCloseKey
RegSetValueExA

wininet

InternetReadFile
InternetOpenUrlA
InternetCloseHandle
InternetOpenA

ws2_32

WSAStartup

msvcrt

??2@YAPAXI@Z
fopen
sprintf
atoi
fwrite
??3@YAXPAX@Z
fclose
free
_initterm
malloc
_adjust_fdiv
fgets

kernel32

CreateThread
CreateMutexA
Sleep
lstrcpynA
lstrcmpA
lstrlenA
GetSystemDirectoryA
lstrcpyA
lstrcatA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetVersionExA
CreateProcessA
GetFileAttributesA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ