8ef032d45d5d58d6bdc67dd605fe1a81_JaffaCakes118 | Triage

Sharing

General

Target

8ef032d45d5d58d6bdc67dd605fe1a81_JaffaCakes118
Size

283KB
MD5

8ef032d45d5d58d6bdc67dd605fe1a81
SHA1

af4b308eaa49a54cf58b4c5eb2e69eb450585b63
SHA256

fdc3f223de11011b98689fc5198b0083c017d8eaab0e180b9ec8ab8085447b01
SHA512

975da64c656388643fa6d7c219f6a1fb62e8305c8ca2c0f39aac18b456e8f27019a93925787edaffd2d477e7e777f44f9c247eb308806495eca3b09d665b150f
SSDEEP

6144:8dQRPilVpFainJUbTc8yCqafKNw4pYDa9ZNLvaTKFyzvc3lRScHP:8+2a/cNC5cKDGLvaTklRScv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ef032d45d5d58d6bdc67dd605fe1a81_JaffaCakes118

Files

8ef032d45d5d58d6bdc67dd605fe1a81_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c6788364623dc62aabc22d1f05e56bd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

gethostbyname

ole32

CoTaskMemFree

wininet

InternetCrackUrlA

urlmon

URLDownloadToFileA

user32

AdjustWindowRectEx

gdi32

CreateSolidBrush

advapi32

InitializeSecurityDescriptor

oleaut32

VarUI4FromStr

Exports

Exports

Always
ConfigCast
GetPlayerVersion
HaahSBd
IJHEHd
PlayA
PrioritSetAd
PutAdSpecial
PutAdsware
SetAdrkOn
StandupYoured
UPAdInfo
adee
jlkjde
plkeAq
sasa

Sections

.text
Size: 164KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE