d4bea2a9b91cfaa8bbfcf573b4f5b7f6_JaffaCakes118 | Triage

Sharing

General

Target

d4bea2a9b91cfaa8bbfcf573b4f5b7f6_JaffaCakes118
Size

10KB
MD5

d4bea2a9b91cfaa8bbfcf573b4f5b7f6
SHA1

4fc2d58bdb120c62754cc68d5220dcb4c28ee278
SHA256

c1edc267bb831526cfaf65d86769afdb9ee2c08acddfab6b8e294085674fd897
SHA512

e47fe3b145613cc8ade999ab82fc8c1666fd1e15762ba2dcb4aca19ca1d805f0cff8ffeccefed6d64a4aa94b3b2d2b3012914feb33f9a6d2d4e9bcaf41179ede
SSDEEP

192:RAkrDSMStSDBuqlUdjBBjyPRfZQ5wJx9tkq:vbStEBuaUdjXjyRfe5wZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4bea2a9b91cfaa8bbfcf573b4f5b7f6_JaffaCakes118

Files

d4bea2a9b91cfaa8bbfcf573b4f5b7f6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5d0102a1882aa5b6feb5a016ee24064c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

user32

wsprintfA

msvcrt

_adjust_fdiv
malloc
_initterm
free
memcmp
memset

kernel32

CloseHandle
lstrcmpA
lstrcatA
lstrcpyA
GetCurrentProcess
VirtualQueryEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
Sleep
ExitProcess
CreateThread
GetModuleFileNameA
CreateFileA
GetFileSize
GetProcAddress
GetModuleHandleA
lstrlenA
GlobalFree
ReadFile
GlobalAlloc

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ