78e83dbec02ef1615408846625b16cb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78e83dbec02ef1615408846625b16cb9_JaffaCakes118
Size

20KB
MD5

78e83dbec02ef1615408846625b16cb9
SHA1

2e30ba59889cd69ceb0f8c777b131f0ccf90b0ef
SHA256

6d9590997592d224d6f63e633eff315782d524e973f33504239b24e9902f3732
SHA512

568d0bf3ae5e40d614cb9ee241116e8796e6fe38fdf415ffcb6e5dac8a4bd90173af4d649c715981ccf5a2caa5faff8ef14361e1af7935f61a72398fa85e23c6
SSDEEP

96:fUAC2sy5WfE/3vfQ/kmze3YcWrwmBwxF3zcz1gC2SePSxgrsQtMaihGDMD+zxZTq:MpE5WM4LIjcztBmsrvDCOZ/BXMj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78e83dbec02ef1615408846625b16cb9_JaffaCakes118

Files

78e83dbec02ef1615408846625b16cb9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9cb1b890517efdbef13e1921a1e17641

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
ExitThread
DeleteFileA
lstrcatA
GetPrivateProfileStringA
LoadLibraryA
CreateThread
WaitForSingleObject
CreateMutexA
TerminateThread
ReleaseMutex
SetErrorMode
WritePrivateProfileStringA
lstrcpyA
GetTickCount
Sleep
lstrlenA

user32

UnhookWindowsHookEx
KillTimer
SetWindowsHookExA
SetTimer
CallNextHookEx
wsprintfA

advapi32

RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ