a47f141197527415270055d9d75fee1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a47f141197527415270055d9d75fee1b_JaffaCakes118
Size

83KB
MD5

a47f141197527415270055d9d75fee1b
SHA1

4af1f2c11b4f701491cf088189de8636ae5e27da
SHA256

6d4feafa360b9cd103228acb69dc454de5732642c83bd4483fc1503d299d0391
SHA512

cea47bba975efb0e54f97558ce94443e8bd148e0b6e2f8fe545dd8654d932b8874e947c96750ac886b5033be52426b215881f56d212c9754f8f93d2c756092bc
SSDEEP

1536:DSUW6js6p7YYdko9q9VTujOVpV9McI9eHMvVVEt9rpTeTpWiD/GSUW6jsa:hXpUY+QGVTwOp9KmFZTegMuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a47f141197527415270055d9d75fee1b_JaffaCakes118

Files

a47f141197527415270055d9d75fee1b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

337dd3d39f547ad022c38fce45bcb3fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

FindWindowA

wininet

DeleteUrlCacheEntry

msvcrt

_ltoa

urlmon

URLDownloadToFileA

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE