d1ebec72d2dc3703858a74d2e9d2ca48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1ebec72d2dc3703858a74d2e9d2ca48_JaffaCakes118
Size

29KB
MD5

d1ebec72d2dc3703858a74d2e9d2ca48
SHA1

3261202c6985d5c4526da60a91d44444008dfed4
SHA256

c12a478375a2285d55d3fcabd9261b3a56f20d69472d2bd388777c9acff5b6e5
SHA512

55751a8e34c6bfb1582d5c9fdb5ed407d22c2af5c6824d5a1684ae0e7ed09d6a3a3f1429ee9d40d9371f8962a91ba0240e07dd538ad8be6f96b05f90e9cbdf29
SSDEEP

192:RCvZsNr5yeZHXGe2382X7waqC8fQ7ciluBBQ6PRQkqW3pfGXAD:02Hw5X78vIuBBQARQkqW3VGX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1ebec72d2dc3703858a74d2e9d2ca48_JaffaCakes118

Files

d1ebec72d2dc3703858a74d2e9d2ca48_JaffaCakes118
.dll windows:4 windows x86 arch:x86

107915c79d839698b75cb1c03b5fe438

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetWindowsDirectoryA
GetProcAddress
Sleep
CreateFileA
lstrcatA
ReadFile
GetModuleHandleA
GetModuleFileNameA
Thread32Next
TerminateThread
Thread32First
ExitProcess
GetPrivateProfileStringA
GetCurrentDirectoryA
CreateThread
lstrlenA
VirtualProtect
lstrcmpA
CreateToolhelp32Snapshot
CloseHandle

user32

KillTimer
SetTimer
wsprintfA

shlwapi

StrStrIA

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

msvcrt

strcat
_itoa
memcmp
strrchr
_purecall
strncat
strlen
_strlwr
strstr
??2@YAPAXI@Z
memset
strcpy
??3@YAXPAX@Z

Exports

Exports

abgdtdtCharacterPlacement
fgfgerrrdBreak
n45fgfgMTextOut
n46hghseGDIWidthCache
nbgmjkotTextExtentExPoint
nbgtdtTextOut
nvbgtitControl

Sections

.bss
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shard
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ