2991c4427311a9800f7f942dc1fc70bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2991c4427311a9800f7f942dc1fc70bc_JaffaCakes118
Size

37KB
MD5

2991c4427311a9800f7f942dc1fc70bc
SHA1

b824649a6f2e184494e6518159ba8df6d951d80a
SHA256

90d153ab70775a5b8828dba309d6e8601e9d8945d56c5830d44a93277e46c2bc
SHA512

bb10fcb070f379d66c2ac0d1fd571bd60675cc4bf4bb3a3d5709cff20975e8d3f5a863730af4c4e6f1fc33ec6520383adf8caaa3911e3678f1c06d6139ecd7ea
SSDEEP

768:YZzttWI3J5UEQCaKPGFowvlCMlmNNCh0KmZLunXXhnXCNZID8ETGcWZ:YZZ4I3bU9TKWJlCRAcLuNXCNZI/vU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2991c4427311a9800f7f942dc1fc70bc_JaffaCakes118

Files

2991c4427311a9800f7f942dc1fc70bc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2700af3881a701c8dae206bcddcca3fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

gethostbyname

wininet

InternetCheckConnectionA

shlwapi

SHSetValueA

urlmon

ObtainUserAgentString

user32

IsWindowVisible

ole32

CoGetInterfaceAndReleaseStream

oleaut32

LoadRegTypeLi

Sections

.text
Size: 33KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE