2d641af093965b5cbaadcd83aa4f1f1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d641af093965b5cbaadcd83aa4f1f1d_JaffaCakes118
Size

29KB
MD5

2d641af093965b5cbaadcd83aa4f1f1d
SHA1

7140d562243776597764f98ddb2191775c51089b
SHA256

bc890b612c628b2efe9da13ba65aed6aadd82bd13e711fdccc25d2483fe7eeb3
SHA512

618f0aebb6c5826b8f2c38b42a337347c551e2c622270bdb697eab4d164dab351a59c88f968c7ab6898d08b09e1eb286f5321c7dd62b7033987af37dcde0c5df
SSDEEP

768:9h/TvvQhRjbacva8F8SlfnGf4XRXfXiXKXKXqXIU/XE:9hLQ/Pach1/GhUM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d641af093965b5cbaadcd83aa4f1f1d_JaffaCakes118

Files

2d641af093965b5cbaadcd83aa4f1f1d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f167a2b51bb2d34cdeb753949bb79bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 702B - Virtual size: 702B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ