236393814d1479d82e6cde6262b67814_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

236393814d1479d82e6cde6262b67814_JaffaCakes118
Size

2KB
MD5

236393814d1479d82e6cde6262b67814
SHA1

09fc50ac2006e25cf664a8335f288e3ad5b2ece7
SHA256

751baa24853c3c7367097d6f86c8fc873bdcb255b854c47d7507d901933d2110
SHA512

2077d44d1443bf7d7580dc49b70dbc2d0629b29ab6291a9220aa0ef24bf25b5bfc3424ebd321029a2e9a94d088ff072eb647e049d85d38c7d9390451aa73a367

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
236393814d1479d82e6cde6262b67814_JaffaCakes118

Files

236393814d1479d82e6cde6262b67814_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1170d9459708bd19a608be0af3c3e978

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

urlmon

UrlMkSetSessionOption

msvcr71

strcpy

kernel32

GlobalFree
GlobalAlloc
lstrcpynA
lstrcpyA

Exports

Exports

_SetUserAgent
_Unload

Sections

.text
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 387B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ