4670fb4c1fbf9e699c570161d55caba5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4670fb4c1fbf9e699c570161d55caba5_JaffaCakes118
Size

20KB
MD5

4670fb4c1fbf9e699c570161d55caba5
SHA1

290e3d2583d14492304b47910a0bdc4ed4c0a92e
SHA256

c9dab0d2a3e984009d6c157a6e23132e5db8eb65af18f2dfcdb8f2fc2b5a978d
SHA512

3797f11fb438297e95cd88eca261c0a91431bf6eef668ec654bcc38bac18ef29a57cfc77bffad20846bae024a1065a113673412c536a720bf55d9c6ffc5cef49
SSDEEP

384:jELXqyOGyUU6jmKB9Es2MnHSvatuyUqORI8oGp/aK:j4XqyOGyB6jmKdfSSUyyR5pyK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4670fb4c1fbf9e699c570161d55caba5_JaffaCakes118

Files

4670fb4c1fbf9e699c570161d55caba5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ac9eefc1d606a487b77a6d5b4996073d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
lstrlenA
GetProcAddress
LoadLibraryA
GlobalAlloc
GetLastError
CloseHandle
GlobalFree
SetFilePointer
GetModuleFileNameA
GetTickCount
CreateMutexA
ExitThread
lstrcatA
CreateThread
DisableThreadLibraryCalls
VirtualProtect
GetModuleHandleA
lstrcmpiA

user32

wsprintfA

wininet

HttpSendRequestA
HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA

Exports

Exports

DllCanUnloadNow

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 602B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ