59d93556f2313c9efcff9892e3bf8316_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59d93556f2313c9efcff9892e3bf8316_JaffaCakes118
Size

763KB
MD5

59d93556f2313c9efcff9892e3bf8316
SHA1

1c6bbf8e91e1b32fd47538b7acd3b51f32ce5862
SHA256

48e28e62f05d11a7f507b03fa370f6200b41591b138fc580f55242dd0fb30a67
SHA512

37cf5ffb54fc94dbfd045d91d0ecaa34881347b27444878fddb80f88aa1392e17d57960003c6b26ee6802c58b057f958f310e1f2e7d0e3067d4d1c93e642d7ab
SSDEEP

12288:6Jx/3MF1Av3bTxxy62HYf8yIww8Pc95IEuDOToGQucaE1O:OIgnxxy624khPPPItFGeaE1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59d93556f2313c9efcff9892e3bf8316_JaffaCakes118

Files

59d93556f2313c9efcff9892e3bf8316_JaffaCakes118
.dll windows:1 windows x86 arch:x86

99f6e96a7a6d9aa5c0e76eb1151ab9ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
GetProcessHeap
HeapAlloc
HeapFree
CreateFileA
WriteFile
SetFilePointer
CloseHandle
GetTimeFormatA

iphlpapi

GetAdaptersInfo

msvcrt

sprintf
strtol
mbstowcs
srand
rand
time

shell32

ShellExecuteA

Sections

.data
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ