b7d02084836f76bfedc96db29b5111da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7d02084836f76bfedc96db29b5111da_JaffaCakes118
Size

43KB
MD5

b7d02084836f76bfedc96db29b5111da
SHA1

1677e4cbf4fb69b9555690f5d5a0a21f5e8e894c
SHA256

c31fd87264282293d910ebbcd3ff267ef0106bf1497a06b0bf7896189a5a16cf
SHA512

292074ae5d5c2cd59e596ff04c152fd06b4fd6fa7d55e41a5da572d1782f2aca1c9dab153f80c24181ce102c5a4105e6f8ce126f6d7d3d231f6ac83c82c833cf
SSDEEP

384:GHoIR/PtHoIR/5GI+zGvdiwGQnacva8xxf0UdA+aOHR:LG/PWG/5GI+qvdxnacva8/08Hx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7d02084836f76bfedc96db29b5111da_JaffaCakes118

Files

b7d02084836f76bfedc96db29b5111da_JaffaCakes118
.dll windows:4 windows x86 arch:x86

325138a7a6afaa775322d76029e01058

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
HeapFree
HeapAlloc
CloseHandle
WriteFile
CreateFileA
FindClose
FindNextFileA
FindFirstFileA
lstrcatA
GetVersion
lstrlenA
lstrcpyA
GetWindowsDirectoryA
WinExec
ReadFile
SetFilePointer
GetModuleFileNameA
CreateThread
GetProcessHeap

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Exports

Exports

_f@8

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ