7478719f2aa3b5870c7427b79a363dc4_JaffaCakes118 | Triage

Sharing

General

Target

7478719f2aa3b5870c7427b79a363dc4_JaffaCakes118
Size

4KB
MD5

7478719f2aa3b5870c7427b79a363dc4
SHA1

3efc45bbe5ab3a945091f0962fe405bef07c4b30
SHA256

8b91c1bedf37b65ae9efedcce004507071db2a97c01ff48ce2afaa2069f9c9d8
SHA512

e3019cb555913f83bc665fc835e05a711b3540e12001de5638dec414678a7f05bdfadc2e523f74932d00f2bc431ea83cc058854b6181fcedc0288b1917751c7c
SSDEEP

96:2jgBHV5TL/cOxEj/NgPYcynEqLxNy3M0:2jwHvTrOeAkqLb0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7478719f2aa3b5870c7427b79a363dc4_JaffaCakes118

Files

7478719f2aa3b5870c7427b79a363dc4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

07077ad693e23c3027375a735c936e59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z
strstr

kernel32

CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetLastError
GetCurrentProcess
Sleep
TerminateThread
WaitForSingleObject
CreateThread
WinExec
WriteFile
lstrcatA
GetSystemDirectoryA

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

wininet

InternetConnectA
InternetAttemptConnect
InternetReadFile
InternetSetOptionA
InternetQueryOptionA
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
InternetCloseHandle

shlwapi

PathFileExistsA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ