c8bcded6c6e771dbb6e57803e0dba49e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8bcded6c6e771dbb6e57803e0dba49e_JaffaCakes118
Size

4KB
MD5

c8bcded6c6e771dbb6e57803e0dba49e
SHA1

3bded388b869502576ae1afce4fd54506c71842c
SHA256

e8fd7c0951e297847d79abc7df271cbc8dc884116121940a6403270b3f4168c5
SHA512

06d99d2c79863186a91a830fb9d0bf4a060fdcd6fdbf8bb4532a2e571ac00baf27138e21cdfff4f56e4c69879ced668b91c194fdd08b8b6d00d40971ab5efc7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8bcded6c6e771dbb6e57803e0dba49e_JaffaCakes118

Files

c8bcded6c6e771dbb6e57803e0dba49e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

08b7b0c008b66763e0d3cfcec574f35e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CopyFileA
CreateMutexA
CreateProcessA
CreateThread
GetLastError
ReleaseMutex
Sleep

urlmon

URLDownloadToCacheFileA

Sections

.text
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ