c254db771507b06e042a2071d73e0fb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c254db771507b06e042a2071d73e0fb5_JaffaCakes118
Size

48KB
MD5

c254db771507b06e042a2071d73e0fb5
SHA1

8fb08bfe275037163987b55d681e4f4e3b92501e
SHA256

6634b64dd66161882bf8df297182663b7588f16df0d670be222a784d68f52889
SHA512

3a93ec55958486c6272823f96966446c81ed07e70b914e16d69a5097b9c2b5fa78a412dd63adf7120dbaa6f686c0c4de0c472895a1a0c71c2a3c432b58f20ab8
SSDEEP

48:QQHU4D9Rasn6pJgStcXlzLb8tXu70Nk1ZdIFLF1Ilri8tqZIrLkkto:QQH/R3v6QlzUVu70N8Icl+RZInkMo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c254db771507b06e042a2071d73e0fb5_JaffaCakes118

Files

c254db771507b06e042a2071d73e0fb5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2ab4d3bcb802f2de3449333a8953ae8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
CreateThread
GetModuleFileNameA
SetFilePointer
ReadFile
GetTickCount
GetWindowsDirectoryA
lstrcpyA
lstrlenA
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
HeapFree
HeapAlloc
CloseHandle
CreateFileA
WriteFile

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 96B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ