f5e43a84202d40827a4aaa3236a5cceb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5e43a84202d40827a4aaa3236a5cceb_JaffaCakes118
Size

12KB
MD5

f5e43a84202d40827a4aaa3236a5cceb
SHA1

10cc99e3ead5e698b0c2fa6473335230c73b12e1
SHA256

2af4cd2c3771615ebe9213c0c52337c59f5b157bf004d05e581e3a94b47135e3
SHA512

e54b312ad071be8ca1e41858f593289157d59108604726fa178ed8186e9ad1ccd069de5438b5d47a7f872cd36b92c0923889d875d24f238bfd004dbc88b78b59
SSDEEP

192:HamOTidCRayCUwphGheDPEDKj4EFJqORq4WrYHTJfm7esBd+IeprU7T:1oidKCUCuWPEDElQ4Wruupd+Iek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5e43a84202d40827a4aaa3236a5cceb_JaffaCakes118

Files

f5e43a84202d40827a4aaa3236a5cceb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1ebbafa2fd4d059bf826f8a6cbe6c23d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetMessageA

shell32

Shell_NotifyIconA

ole32

CoUninitialize

oleaut32

SysAllocString

msvcrt

strcpy

wininet

InternetCloseHandle

shlwapi

SHGetValueA

Sections

.text
Size: 6KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE