c98588585f74c70337c4b5967434cb28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c98588585f74c70337c4b5967434cb28_JaffaCakes118
Size

235KB
MD5

c98588585f74c70337c4b5967434cb28
SHA1

23c5eab7e3e79981024e584d24e678409da6ede5
SHA256

4e3dcf23a2ac2557ff8565e6737a980e1f2d96b0e69056fb8d085e475625cf31
SHA512

a2ffdce708a4f0c70cefaa5e53712ea9cc390b0a60fb706144de205c46fc3d57eb5614ea0550bd52194d82cfc6fac3b380ab32bec6a66616d1eb06bdc5211dd0
SSDEEP

3072:5aXRY42CcDI5cHm7oejHP5L7WNptkqRmPVpa1lOzgw4NNTbxQVmvaTIRE8UX2oDc:5aXaHvSc2ZWNnkqRiVc1bZzxqgud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c98588585f74c70337c4b5967434cb28_JaffaCakes118

Files

c98588585f74c70337c4b5967434cb28_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

down_load_file
get_html_from_buffer
get_html_len_from_url

Sections

CODE
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ