dfa06797c895c6b85d748866c5a54637_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfa06797c895c6b85d748866c5a54637_JaffaCakes118
Size

12KB
MD5

dfa06797c895c6b85d748866c5a54637
SHA1

53dec56df1fe9fca2c7253ac922b5507d6ccae7e
SHA256

eb3158fb04461e416ec474212bd91ffa1ebf68120c9dbb1517b797bbea14a560
SHA512

d23ce5d751663dd99e474d61643f5cfc9d6a36e4d603d575e1f490208e1d1d8af6719eda908a9d5b9821213598f2856a2f07137994a5491be8cbffd4504201d2
SSDEEP

192:v6KYgqQL+InsK/qvt9gTCWdHfnnVYBJlMGPPd12EqomF47t76o:v6xCnsK/qvv/WxCMKPiEqomF47t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfa06797c895c6b85d748866c5a54637_JaffaCakes118

Files

dfa06797c895c6b85d748866c5a54637_JaffaCakes118
.dll windows:4 windows x86 arch:x86

51301b2f2addbeaccae3007be311c857

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wvsprintfA
GetSystemMetrics

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

kernel32

HeapFree
Sleep
WriteFile
HeapReAlloc
GetStdHandle
GetSystemTimeAsFileTime
HeapAlloc
GetProcessHeap
lstrcmpiA
ExitProcess
CreateThread
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
GetVersionExA
CloseHandle
CreateFileA
GetTempPathA
MoveFileA
CreateProcessA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ