c267a9e74a34748d1be7e2d139043226_JaffaCakes118 | Triage

Sharing

General

Target

c267a9e74a34748d1be7e2d139043226_JaffaCakes118
Size

24KB
MD5

c267a9e74a34748d1be7e2d139043226
SHA1

1fec90327eab7b2a3f8bf6a10393080b9a5fc039
SHA256

3fe7be04f701e4ba613d3b1a12c4a09609d94ffae8912e9458d70f0634b521aa
SHA512

343b4cb3ea2f4b4081e31185ab3ad8296aaff88ca36ba2f0aae783e245e227a536df5bc3e680e84fb393c1c951ec50e6ff48b469f33070a7537049cc6ddb1498
SSDEEP

96:HhUuAAXgc6FOYCyPz/dlcbdt3tKAujUAuAM4ZHrOcG7s2GgAM7AP0JkM08M:HekwBOYCZ9TW/qF7sS7AP0J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c267a9e74a34748d1be7e2d139043226_JaffaCakes118

Files

c267a9e74a34748d1be7e2d139043226_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d62a03f825ac812ed36ea589817ffa01

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2818
ord668
ord6877
ord860
ord5710
ord2770
ord356
ord537
ord540
ord939
ord535
ord2919
ord5572
ord5683
ord4129
ord858
ord800
ord2915

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
_mkdir
_mbscmp
malloc
free
__CxxFrameHandler

kernel32

CopyFileA
GetPrivateProfileStringA
DeleteFileA
Sleep
WinExec
GetModuleFileNameA

user32

GetMessageA
DispatchMessageA
FindWindowA
SetTimer

advapi32

RegQueryValueExA
RegOpenKeyExA

urlmon

URLDownloadToFileA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Exports

Exports

DPldalic

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 466B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ