89a62ec06e56f5618503040c2a044d55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89a62ec06e56f5618503040c2a044d55_JaffaCakes118
Size

21KB
MD5

89a62ec06e56f5618503040c2a044d55
SHA1

a6f2526fa7f8177df3e367ab86936badd91b7d2d
SHA256

92fa122e964e5383a9d663bc01720dab9d988c2f8697cc1b3587872d077571c4
SHA512

e1e954cc73a41af09bf3c7227aae1c6ebe7b37728017e4b4d31237b5fc8912e738a0ba22b409e794639630871c42077bb7c8962cb42e9d9089f59f3430f9b307
SSDEEP

384:IhrW/NJK8q2OC8RihFC8pzbqeg/9Y423SbjdKfsx:IWE92OzEvSK42Cbv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a62ec06e56f5618503040c2a044d55_JaffaCakes118

Files

89a62ec06e56f5618503040c2a044d55_JaffaCakes118
.dll regsvr32 windows:4 windows x86 arch:x86

c682483b70b3c7dbf346bc2437de0526

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
Sleep
GetTickCount
lstrcmpiA
CloseHandle
lstrlenA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls

wininet

InternetReadFile
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA

Exports

Exports

DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ