8bc90977cb7c3dc23e89cf0d387705dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bc90977cb7c3dc23e89cf0d387705dc_JaffaCakes118
Size

30KB
MD5

8bc90977cb7c3dc23e89cf0d387705dc
SHA1

cbc8f05218ff2b627b614f8db9158610f22d00ca
SHA256

5a695033c8331335e0fc55b9d1567eb901be81b4422688dc1341eb040cd0ef52
SHA512

a263c0e6c1efabef58ae579af0958059da04b0057718d5f6ccc03eeb99bee105f7871e204954697135360ccf4eca25684bd26f72a200465cd57a329405c52b9c
SSDEEP

768:94XNvJ4/acva8ibGxnfWwdPdJ4dpdidJEdJS:9m34/acAGhFZES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bc90977cb7c3dc23e89cf0d387705dc_JaffaCakes118

Files

8bc90977cb7c3dc23e89cf0d387705dc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b1fde03e6f0ecb97386cda71c4fec3fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA
GetLastError
CreateMutexA

wininet

InternetOpenUrlA
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 736B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ