aab5386133c06f19a8d887aa55b9b379_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aab5386133c06f19a8d887aa55b9b379_JaffaCakes118
Size

16KB
MD5

aab5386133c06f19a8d887aa55b9b379
SHA1

d1c4a5f98e7ae4d2881345eac2ef3aa70e4d9408
SHA256

75a679d1d286ccf9dc0b727acc2b11aff48ce4a28f2d676fae6e5e1af3eb5079
SHA512

b91c241f5ef8a950ab1dca3707fd00249322bea9095bc5005977758f5e98b5691ffbb63fc36d4f3fff4a066a656b4ca6a40014eddbcf33537db34f8c9297a112
SSDEEP

192:9FUT4qGMRwcwLUkkpPIzzLyupMtiq7b8DOW/2pL4Ke6NY0IHb:9WT4qGMRxwLeAze4MF7b8DOWaeEY0I7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aab5386133c06f19a8d887aa55b9b379_JaffaCakes118

Files

aab5386133c06f19a8d887aa55b9b379_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e741381a2ba1271313b12939650c69c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
lstrlenA
GetProcAddress
LoadLibraryA
GlobalAlloc
GetLastError
CloseHandle
GlobalFree
SetFilePointer
GetModuleFileNameA
GetTickCount
lstrcatA
CreateThread
DisableThreadLibraryCalls
VirtualProtect
GetModuleHandleA
lstrcmpiA

user32

wsprintfA

wininet

HttpSendRequestA
HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA

Exports

Exports

DllCanUnloadNow

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ