2e79fd5e35694fbe7201c8c6f020a1a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e79fd5e35694fbe7201c8c6f020a1a2_JaffaCakes118
Size

33KB
MD5

2e79fd5e35694fbe7201c8c6f020a1a2
SHA1

963bf0f298d7f9b7c4833b9beb09217cd9274f42
SHA256

456c876201ec43556297547cdc147c12faf47fbbf4a2b9e434bda3126a811da3
SHA512

60f8a0ca9f3043638c3b774bf796c184809f0c1554cdaf5d8d618d481b919e822ae27b256bb269eef9748583da380d01147c5f52379542aca42e94d52623e98f
SSDEEP

768:94ZfnGfrXeXeXeXeXeXIBXIEYXIE0XIEMXIFXIE2:9Y/G7WEtE5ERKE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e79fd5e35694fbe7201c8c6f020a1a2_JaffaCakes118

Files

2e79fd5e35694fbe7201c8c6f020a1a2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b1fde03e6f0ecb97386cda71c4fec3fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA
GetLastError
CreateMutexA

wininet

InternetOpenUrlA
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 736B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ