380f7ca6952e1cb352c44283060d83cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

380f7ca6952e1cb352c44283060d83cc_JaffaCakes118
Size

213KB
MD5

380f7ca6952e1cb352c44283060d83cc
SHA1

9e83cd06b7e643e423ee694a3fdd3d205ba779e3
SHA256

9222e579c81d9776b5409cba16911dd614395c1b595612ec910325a1bb09129b
SHA512

3f8812852a59322c82a8b2fb4b1fa3b410abcad6521981386d158096bad7c27ee44a5db4bf5fc0c67b7a20fd33c23449a753b8f917185c76aba97f1913d0eb07
SSDEEP

6144:b64rk7Rdq0h42Xu5hkNBPwLb7L0Yr6kU0hykV:Rk75u5K3PwsYOkUhs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
380f7ca6952e1cb352c44283060d83cc_JaffaCakes118

Files

380f7ca6952e1cb352c44283060d83cc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

545179dc0cedc718decd99ff2519f29c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSACleanup

ole32

CoTaskMemFree

wininet

InternetReadFile

urlmon

URLDownloadToFileA

user32

GetForegroundWindow

gdi32

CombineRgn

advapi32

RegQueryValueExA

shell32

SHGetFolderPathA

oleaut32

SysAllocString

Exports

Exports

Always
DSDD_YUNJ_DOSS
DownloadDLL
GetPlayerVersion
KingsStop
KingsUp
playAdk

Sections

.text
Size: 202KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE