4849a30fcb40a58732397510b8213fda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4849a30fcb40a58732397510b8213fda_JaffaCakes118
Size

47KB
MD5

4849a30fcb40a58732397510b8213fda
SHA1

587cf83c65f087c1e939925e057353caa99f64b1
SHA256

360156fb4e61a6a5f77d5b9d919880444b019297d7d49ef7fdeac2f53a636c23
SHA512

0cd246c8b7609febd9b47f3096740bff9c66001f179b54fd012e37c856e172110ce52900e7c5f86b6d1a4e3a1f3ce68ed12f702b2721e4236dc8c74d19d4e10a
SSDEEP

768:94cNvJ4/acva8ibGxnfGGfcGffJdJONd2d2dqdPdJmdJOFdJOzdodEdxO:9J34/acAGhuGkGVXy8B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4849a30fcb40a58732397510b8213fda_JaffaCakes118

Files

4849a30fcb40a58732397510b8213fda_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b1fde03e6f0ecb97386cda71c4fec3fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA
GetLastError
CreateMutexA

wininet

InternetOpenUrlA
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 736B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ