ba8153e26bd542cd7425b29e2e0950e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba8153e26bd542cd7425b29e2e0950e7_JaffaCakes118
Size

275KB
MD5

ba8153e26bd542cd7425b29e2e0950e7
SHA1

807916a265c9afd51b84a1c794c4b6c04e92286e
SHA256

64bd52e8d8c003bacf2735bf8b0207eb97aec8551a5920847998b4a1f9deea9b
SHA512

c7aa1370c6c85f60f3843f95a2e846bbca95be964c56c29c35dd46f1e77fb2bac9973b66bd2bd3142136b66cf487cd4ea22596bb28fe027791af2985734d05a1
SSDEEP

6144:SGkxR+FolJ1wKeOOVjR6ykQI9eNVDyZJYhUOy2vLbT1yUuxoNxBn:oAFAJTFdV9qyoUON71yUu8zn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba8153e26bd542cd7425b29e2e0950e7_JaffaCakes118

Files

ba8153e26bd542cd7425b29e2e0950e7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c6788364623dc62aabc22d1f05e56bd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

gethostbyname

ole32

CoTaskMemFree

wininet

InternetCrackUrlA

urlmon

URLDownloadToFileA

user32

AdjustWindowRectEx

gdi32

CreateSolidBrush

advapi32

InitializeSecurityDescriptor

oleaut32

VarUI4FromStr

Exports

Exports

Always
ConfigCast
GetPlayerVersion
HaahSBd
IJHEHd
PlayA
PrioritSetAd
PutAdSpecial
PutAdsware
SetAdrkOn
StandupYoured
UPAdInfo
adee
jlkjde
plkeAq
sasa

Sections

.text
Size: 164KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE