858ac4539051332836b6b7147eab1f53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

858ac4539051332836b6b7147eab1f53_JaffaCakes118
Size

37KB
MD5

858ac4539051332836b6b7147eab1f53
SHA1

f66d1f738eea074ff9ab6bd87e4bb761de3982b9
SHA256

282fcb1b9830513559a44cd1d35b21ede926ab4a3ee12925328f65d7d751e937
SHA512

a59589c00ac214f1e662c802eff2b0ac2d44f7c09f827fca56c92f8fc3515b245748787bc9b346692c14624c2e23cefad85c49a4888340c250ca1450eec47f53
SSDEEP

192:9ltX2Im7vdiw7sTQ0kacva8xxf0tA5dAAz/aOgcR:9zGvdiwGQnacva8xxf0UdA+aOHR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
858ac4539051332836b6b7147eab1f53_JaffaCakes118

Files

858ac4539051332836b6b7147eab1f53_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e6dc8ba12d4674b3d67a2361099563d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
GetLastError
CreateMutexA
Sleep
GetEnvironmentVariableA
lstrcat
lstrcpy
lstrlen
CreateDirectoryA
GetWindowsDirectoryA
CreateFileA
WriteFile
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
SetFilePointer
DeleteFileA
CloseHandle
ReadFile

wininet

HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegDeleteValueA
RegEnumValueA

user32

wsprintfA

Exports

Exports

f

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 544B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ