8e15306d64210cbe517d031d304eb0a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e15306d64210cbe517d031d304eb0a1_JaffaCakes118
Size

34KB
MD5

8e15306d64210cbe517d031d304eb0a1
SHA1

83e23b280dcf29ab6fdfa3b0672794789bffdb70
SHA256

6c0edf781a48977a59b68afd75c5aff077876ccb077a873b3f3447a9ce7d6fc3
SHA512

17aa72d6db90a0e43694ce88c83bf5d7df55c223623e3d87e7d1352eb722dc80725e3e2cc75fa231abb68c8d3abc45ae9c9f9aabb44e12d20f726aa5cf0214e9
SSDEEP

768:9fGGfcGfNGfL/XIELntXIECtXIEatXItTtXIatXytXIItXIEZ:9uGkGVGUELSEfEnE6hEZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e15306d64210cbe517d031d304eb0a1_JaffaCakes118

Files

8e15306d64210cbe517d031d304eb0a1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2ab4d3bcb802f2de3449333a8953ae8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
CreateThread
GetModuleFileNameA
SetFilePointer
ReadFile
GetTickCount
GetWindowsDirectoryA
lstrcpyA
lstrlenA
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
HeapFree
HeapAlloc
CloseHandle
CreateFileA
WriteFile

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 96B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ