68986e9e49dac972aa5d67aae967092e_JaffaCakes118 | Triage

Sharing

General

Target

68986e9e49dac972aa5d67aae967092e_JaffaCakes118
Size

16KB
MD5

68986e9e49dac972aa5d67aae967092e
SHA1

b0f9e95cc252caebe05ca53afd6729d59972f126
SHA256

392684fee862ad367a0e80794de8bce38aa35c8b02ea4e63d994d101baf5783f
SHA512

3c9570599347d55afd8817a20059c7d5ad99e3c04a8950159e231d8b8bc800a290ec0ee252df96f05594dc1c19472c68f392a2b9009b39c99877f717dbfa67f9
SSDEEP

192:4ttA+Qow+vlqd9E3U91fTy3IeyxemAyGNeaQ2rFO68FHyHbxoXCQpAzKgskCaK4j:2m+Udv1fm3CAlACFCp2gCQpzgskCNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68986e9e49dac972aa5d67aae967092e_JaffaCakes118

Files

68986e9e49dac972aa5d67aae967092e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fcf1c5b288978d44f0a289df0ece855f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup
inet_addr

wininet

InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetConnectA
HttpQueryInfoA

iphlpapi

GetAdaptersInfo

advapi32

LsaFreeMemory
LsaClose
LsaOpenPolicy
LsaQueryInformationPolicy

dnsapi

DnsQuery_A

shlwapi

SHGetValueA

ntdll

sprintf
_snprintf
strncmp
atoi
tolower

kernel32

HeapAlloc
HeapFree
ExitThread
TerminateThread
GetProcessHeap
GetVersionExA
Sleep
HeapReAlloc
GetModuleFileNameA
CreateThread

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ