5cf743ef4e0a8fc592459a532e91140d_JaffaCakes118 | Triage

Sharing

General

Target

5cf743ef4e0a8fc592459a532e91140d_JaffaCakes118
Size

1KB
MD5

5cf743ef4e0a8fc592459a532e91140d
SHA1

85d21015d5b7f555d8ec261a44525501f4bbbc0f
SHA256

ae0c68f206d8fc55d42a49fa6b7619659ee0cd16ec676eb208706054cf98a6f0
SHA512

b2124c195bb1eddaa818eb75df536dd3a6ec759292f46317fa2857fba814555dc8f19faf67979c5616a805e92215eb9569bf44831b025fed0e19b16e4780c4a7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cf743ef4e0a8fc592459a532e91140d_JaffaCakes118

Files

5cf743ef4e0a8fc592459a532e91140d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

493ede841f7a35f921607d9eff6bf6bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WinExec
lstrlenA
GetCommandLineA
lstrcpyA
lstrcatA
Sleep

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

Exports

Exports

Start

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ