71b60131efbbf368f42d79b25a094b61_JaffaCakes118 | Triage

Sharing

General

Target

71b60131efbbf368f42d79b25a094b61_JaffaCakes118
Size

2KB
MD5

71b60131efbbf368f42d79b25a094b61
SHA1

123468027831d67e41a023b8832a4b99ad956044
SHA256

83925347a8ba7154b1251310a6f1bbfd31bd1a2622a60de14ff5c3dd340eba96
SHA512

3647ac9e798f7b94022fff116edcc5a81d37a46ae6663d8ec50f8cf6a3a9c0fd3097872a1ab670802c235cdad33c9ebd3f9ff8e4f9b38f1171214ed6b390be38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71b60131efbbf368f42d79b25a094b61_JaffaCakes118

Files

71b60131efbbf368f42d79b25a094b61_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f167a2b51bb2d34cdeb753949bb79bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 40B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ