a7d40e71a67fb6e82e773296945390a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7d40e71a67fb6e82e773296945390a6_JaffaCakes118
Size

27KB
MD5

a7d40e71a67fb6e82e773296945390a6
SHA1

5812d11b7d3fd04807f329a1e2ddf5858d9978f8
SHA256

ab250f530e76733d0c3b57b3c95ba4f56a149e002c0c26d445cbc88c95c2adb8
SHA512

9361620d9f0c2db86b8a5c83fd1a021aa59f80b3e10bc674f64baf01675a05570c2734042347bd82632b0b92f5e38d276e1bb6cc4044b5bb90369768f72f1609
SSDEEP

768:9h2TvvQhRjbacva8F8SWfnGfSqXwXtXIU7XIUeXIUq:9ALQ/PachG/G6wU8UfUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7d40e71a67fb6e82e773296945390a6_JaffaCakes118

Files

a7d40e71a67fb6e82e773296945390a6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f167a2b51bb2d34cdeb753949bb79bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 702B - Virtual size: 702B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ