bb63f9285c6e0437c46fdcfe47892c3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb63f9285c6e0437c46fdcfe47892c3b_JaffaCakes118
Size

41KB
MD5

bb63f9285c6e0437c46fdcfe47892c3b
SHA1

f13a52b3d300a71259f70bbf2429f986ba49a1fc
SHA256

13b55ec25a6770f9bb9d172d18690c372cf546017517074b0920e750444cc353
SHA512

a3e14601db5c3a9af28d090b0b86a9f29d8a90f0d58cae72e71dd03d922950db03631e99489da38c804b81245475bea915e85a5016ba735372d62bffcf233e9a
SSDEEP

768:94ZTvvQhRjbacva8F8SWfnGfS6XFXeXeXeXeXeXeXeXeXeX9XIE8XI8XSXIEM:9YLQ/PachG/G6mEBQEM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb63f9285c6e0437c46fdcfe47892c3b_JaffaCakes118

Files

bb63f9285c6e0437c46fdcfe47892c3b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b1fde03e6f0ecb97386cda71c4fec3fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA
GetLastError
CreateMutexA

wininet

InternetOpenUrlA
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 736B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ