3835ac59b7762c583777ffab21efe456_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3835ac59b7762c583777ffab21efe456_JaffaCakes118
Size

42KB
MD5

3835ac59b7762c583777ffab21efe456
SHA1

0800a9d05f62bd39fbb0b8ab4a47ce849cc2d2e4
SHA256

c05144b1474dd068a2fccc2af04a62add512b2b67f98292196c748e7ffb2cbaa
SHA512

d9854b699f4fc0852e180f99bbbfa3424ff4a6175a28efc6452fa175ccdb2fe3bd09afed6904ca5a2b9648e379348c3ed70418856d6c53d33acc6bc4279c31cc
SSDEEP

768:94cNvJ4/acva8ibGxnfGGfcGffJdJUd2dbdSdhdJXdldJNdedJOm:9J34/acAGhuGkGVYr6J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3835ac59b7762c583777ffab21efe456_JaffaCakes118

Files

3835ac59b7762c583777ffab21efe456_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b1fde03e6f0ecb97386cda71c4fec3fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA
GetLastError
CreateMutexA

wininet

InternetOpenUrlA
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 736B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ