adb10f359de39884adf2d5af0ed3d6ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adb10f359de39884adf2d5af0ed3d6ce_JaffaCakes118
Size

209KB
MD5

adb10f359de39884adf2d5af0ed3d6ce
SHA1

69044a3de823449bf489e5d58d8aea0f06610c25
SHA256

cfa750f2ac2001b6db781669d693330ec780d204cc996c742877d52423572459
SHA512

6a74453a1bfcdab7cd3478cdc9184324046b723350a7119b4704ab4088ad87ec2ee56686bb7bc7c0a6b93e635204a28828ec3b991bb0146b219dcb544a7533de
SSDEEP

3072:RnICT6HPq9hc5IzaotURT49IiHftT9rNi9rNTY1bQOlQTEZvH3lv3gX/PAjX:dTzwIzaZ49Rt/or5Y1bQOF3xwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adb10f359de39884adf2d5af0ed3d6ce_JaffaCakes118

Files

adb10f359de39884adf2d5af0ed3d6ce_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e58cbe1987ce862de8a3ea3cc1782d5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

gethostbyname

ole32

CoTaskMemRealloc

wininet

InternetOpenA

urlmon

URLDownloadToFileA

user32

GetForegroundWindow

gdi32

GetPixel

advapi32

RegQueryValueExA

oleaut32

SysAllocString

Exports

Exports

Always
CallByControl
GetPlayerVersion
HxcDown
HxcUpdate
RunAD
Stop
playAdh

Sections

.text
Size: 198KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE