31227ecf51ad37c6d34d0ef4193925bc_JaffaCakes118 | Triage

Sharing

General

Target

31227ecf51ad37c6d34d0ef4193925bc_JaffaCakes118
Size

15KB
MD5

31227ecf51ad37c6d34d0ef4193925bc
SHA1

98a07b1dba92b890b32b7ec031dcbee0f9fd7b39
SHA256

b85c9d1cb2450d3d31c2a53f33b3f92156709a2d227cc34c650da996dce87a8f
SHA512

f662104c0ff116be9e1e053b098e71a61c12a7bde162e22c73ddad8b7027159e61def36f0fd6f6a92a3521dbe1dab10651ba4bdd879122fb270c340304ccb489
SSDEEP

192:x0EMs5xrR8jjGZdYzlHsi8x7WtW6boMuBWgeCw:x0EMsbrWHGZdSlt8x7WtWGsW7Cw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31227ecf51ad37c6d34d0ef4193925bc_JaffaCakes118

Files

31227ecf51ad37c6d34d0ef4193925bc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

51a770d0abb8b19bdcbd310bf481bfb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
lstrlenA
GetProcAddress
LoadLibraryA
Sleep
CloseHandle
GlobalFree
SetFilePointer
CreateFileA
GetModuleFileNameA
GetTickCount
lstrcatA
CreateThread
DisableThreadLibraryCalls
GetLastError
CreateMutexA
VirtualProtect
GetModuleHandleA
lstrcmpiA

user32

wsprintfA

wininet

HttpSendRequestA
HttpQueryInfoA
InternetOpenA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA

Exports

Exports

DllCanUnloadNow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ