c98b0dc681e736b0c1ebaa940109eab3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c98b0dc681e736b0c1ebaa940109eab3_JaffaCakes118
Size

4KB
MD5

c98b0dc681e736b0c1ebaa940109eab3
SHA1

32e6df32e1f538ac8890d67a68e44ef51cfeef11
SHA256

4f6681e1d92a28a47df0f372e817d45267b3191c0c2a120c5de848a3bc75e626
SHA512

7de85991d0e25a93c5a90945d0635a5b50138c7e123773ed488b1c474c8c98b527934b8e579e2fb6ec4957d43fef2d9000a28fd3e329c5d3643a302da2f56011

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c98b0dc681e736b0c1ebaa940109eab3_JaffaCakes118

Files

c98b0dc681e736b0c1ebaa940109eab3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

497a4c373ff604b7449333289d5cc495

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateThread
GetLastError
OpenProcess
ReadProcessMemory
RtlZeroMemory
Sleep
VirtualProtect
lstrcatA

user32

FindWindowA
GetWindowThreadProcessId
KillTimer
SetTimer

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ