4150a914a5d4d3b8e5a2d66673ff0d95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4150a914a5d4d3b8e5a2d66673ff0d95_JaffaCakes118
Size

6KB
MD5

4150a914a5d4d3b8e5a2d66673ff0d95
SHA1

a8d40af0472a88ed80226200d79d2dc85d99f28f
SHA256

8bda5f93a9229e73afd36188674cc5342f82ef5d8e16e15f5977497b76231e9a
SHA512

3388b9b2181a5a9af697946df1f0849314c6b27261ad751f51c9736d8a1faa374f6c3833786caa24861feef78b01a886342054ba008b603840c3f1c45e3beb4d
SSDEEP

96:JulK43w0cRSBxwcW92ZzrHNmP5UXwdIxoYFgZxZnslpW7:Ju7AjRSrQKt6/AtFgZTnsbE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4150a914a5d4d3b8e5a2d66673ff0d95_JaffaCakes118

Files

4150a914a5d4d3b8e5a2d66673ff0d95_JaffaCakes118
.dll windows:4 windows x86 arch:x86

531d0c72b5e5533f5e2ea719ad438c9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

msvcrt

_strlwr
_initterm
_beginthreadex
srand
fopen
fgets
fclose
remove
malloc
strstr
rand
free
sscanf
sprintf
time
_adjust_fdiv

kernel32

FindResourceA
FreeLibraryAndExitThread
LockResource
LoadResource
Sleep
GetLastError
GetLocalTime
lstrcatA
CreateFileA
WriteFile
CloseHandle
lstrcpyA
WinExec
ExpandEnvironmentStringsA
GetModuleFileNameA
GetUserDefaultLCID
GetSystemTime
SystemTimeToFileTime

Exports

Exports

_GetMessageHookProc@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ