f5a1b2442be9090322d8e0e48474ff6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5a1b2442be9090322d8e0e48474ff6f_JaffaCakes118
Size

19KB
MD5

f5a1b2442be9090322d8e0e48474ff6f
SHA1

219012a1fb632c7e5f15efc9719b5a0b430f4fc3
SHA256

e3a5b6e4bca5c74ed140f824f1b64ec455515723303a6ce9e4f95c402b689c3c
SHA512

c2244e3a7a4f0d45d9e2004a4b5a718ce2f6988ad2d276bc20ca9b5b69aa60dfb21696a02cc2bfe9c0d80ef9b2dd21254d9b5975ceab5ff3de8e12e99f3ee596
SSDEEP

384:Db+kcjxFPf+g2xj3p05asE5U3zckx7PVQKOKscha8k:+kc9FP2gM05asmAckRGKsch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5a1b2442be9090322d8e0e48474ff6f_JaffaCakes118

Files

f5a1b2442be9090322d8e0e48474ff6f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8c8edcc84febd3718a819f6b1c615602

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
CreateEventA
GetFileAttributesA
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalFree
GetModuleHandleA
CloseHandle
lstrcpyA
lstrcpynA
SetFilePointer
RtlUnwind
lstrcmpA
CreateFileA

user32

DestroyWindow
GetFocus
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
SetWindowLongA
MessageBoxA
GetWindowLongA
CreateWindowExA
GetDlgItem
ShowWindow
CreateWindowExW
IsWindowVisible
SetWindowTextA
EnableWindow
CallWindowProcA
SetDlgItemTextA
GetWindowRect

advapi32

RegQueryValueExA
RegCloseKey
RegLoadKeyW

wininet

InternetConnectA

Exports

Exports

cool
feed
plem

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ