6f78f236fcfa7a55a7632a93231d3e92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f78f236fcfa7a55a7632a93231d3e92_JaffaCakes118
Size

5KB
MD5

6f78f236fcfa7a55a7632a93231d3e92
SHA1

6db18ec82b07c14d7c3852e7cea9bd8eedc31668
SHA256

bb7dee8fa1b7147c9b1fad289fd25f1d5307f5cadfaef1c99b34985ad4ec9578
SHA512

863b4e53152c9b783c9e7c2f941fdfdc298381396765beae268b11298110c69b1864ae4cb400dc8f036658e643ff0c8c9fb61ce96f755d96ddc6e5ae02f3fab6
SSDEEP

96:eZXWoqLpcJLF15dnDSet/P1lz1XgIeLuDe1T/YK:eZX6d65dnuehtlBQVCDoU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f78f236fcfa7a55a7632a93231d3e92_JaffaCakes118

Files

6f78f236fcfa7a55a7632a93231d3e92_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5f0277c6989105fbe8599b5942f5d885

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

_lopen
CreateFileA
CreateThread
DeleteFileA
ExitThread
GetFileSize
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
SetFilePointer
Sleep
WinExec
WriteFile
_lclose
CloseHandle
_lread
lstrcatA
lstrcpynA
lstrlenA

shell32

ShellExecuteA

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

Sections

.text
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 787B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ