4db3f0729722f11e47afe9d78f49adfd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4db3f0729722f11e47afe9d78f49adfd_JaffaCakes118
Size

36KB
MD5

4db3f0729722f11e47afe9d78f49adfd
SHA1

09b1a5599c31157adf335e2cebd6c532561643b2
SHA256

e79f468e573a1b7b6653a86a4dfb8a79ca682d4becdc19c9aab16d258548ddc5
SHA512

db9088dffd260785e052920b3b92a289d9e1d3b4319efbd09e6ee923715de352b8a485e40b3e3d4a481a60f8eff8c517ec046422e995bcbbdd8cfcb6e3bd1aa6
SSDEEP

192:9IQBltX2Im7vdiw7sTQ0kacva8xxf0tA5dAAz/aOgcR:9I+zGvdiwGQnacva8xxf0UdA+aOHR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4db3f0729722f11e47afe9d78f49adfd_JaffaCakes118

Files

4db3f0729722f11e47afe9d78f49adfd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f167a2b51bb2d34cdeb753949bb79bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 40B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ