8739f57fb11fa4ff58e7d6b9ee81ac3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8739f57fb11fa4ff58e7d6b9ee81ac3e_JaffaCakes118
Size

25KB
MD5

8739f57fb11fa4ff58e7d6b9ee81ac3e
SHA1

2d563b08934d0b2bc015028f845a60a5b0ec2447
SHA256

ed047f18b0c93ca1a3a156811b9ccd5f1ec740f4085b304baad1990bc580e884
SHA512

6183a3655350ca143ccfc476a3c68ed6f0614683be1e92861833bf5aec8fc4ebaf5e4eb7d9b0d47a175f620332237b326262f9157626820d6f146b14f901abb6
SSDEEP

384:lao5xzf08QEpVFgC4yzrwh3xneEQ/gpS6JTxPngQLLmm+HNYCVf6Dn1q4BVd:coxz1QQPotxnbegpS6DPgoeH/fCT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8739f57fb11fa4ff58e7d6b9ee81ac3e_JaffaCakes118

Files

8739f57fb11fa4ff58e7d6b9ee81ac3e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

60b7690e8534f79eca0b770bd3c809ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

SelectObject

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

shell32

SHGetSpecialFolderPathA

Exports

Exports

InstallHook

Sections

CODE
Size: 20KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE