60bc38b86c8e466b03dc5575fd73a713_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60bc38b86c8e466b03dc5575fd73a713_JaffaCakes118
Size

15KB
MD5

60bc38b86c8e466b03dc5575fd73a713
SHA1

213e62eb08b327ff659b950f43eb4d8085e1ad30
SHA256

52a142e5069b34d285ca3297525dd88cec85b25e99d442ebddaaad1efcc73373
SHA512

bd12bcd2f229a55edffe3e70ba6f1be709f530934b1382034171d2815d5f31716eaf05fbc48f59303a6da81c8c55939072919f41324efae356fa31b33f8db5eb
SSDEEP

192:T98zBOWjcWf6rUfA0oaJZnw+BFkkpPIzzLyupMtiqK8YvWgSeGBlcR:T2sWjcWf2GHJ59BnAze4MFK8YvWReGW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60bc38b86c8e466b03dc5575fd73a713_JaffaCakes118

Files

60bc38b86c8e466b03dc5575fd73a713_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5a0f2b72c10e86da3b6f4885c23e158d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
Sleep
GetProcAddress
LoadLibraryA
GlobalAlloc
CloseHandle
GlobalFree
SetFilePointer
GetModuleFileNameA
GetTickCount
lstrcatA
CreateThread
DisableThreadLibraryCalls
VirtualProtect
GetModuleHandleA
lstrcmpiA

user32

wsprintfA

wininet

HttpSendRequestA
HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA

Exports

Exports

DllCanUnloadNow

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ