fba3fa505606b8ef9b42445dcce1e0ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba3fa505606b8ef9b42445dcce1e0ab_JaffaCakes118
Size

8KB
MD5

fba3fa505606b8ef9b42445dcce1e0ab
SHA1

98a77f723d04d3acaefb351692bde930b94cf0c4
SHA256

bd757129a765d9291932a005668b79d0354be1f0e89ea8f49ab75463068d1b19
SHA512

4a22330bdeb58dc1c8edcd354cef8ef91fa991302418d1435e0a35f3bf3dae92ac4f06c5b8982872386ea2ecc536ced4e343ee6903f8157583fbec99653c0a68
SSDEEP

96:ZE7zXatnFTaN/KECXYxRh1V4LhDsZ8L7MHzcPiz/KH0A74NR+DIshZTqD7k:ZAzXMFeNyGh16hD77GJmTDAD4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fba3fa505606b8ef9b42445dcce1e0ab_JaffaCakes118

Files

fba3fa505606b8ef9b42445dcce1e0ab_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6fe74a8e069dfcaefee4afea3173d431

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetWindowsHookExA
MessageBoxA
CallNextHookEx

kernel32

lstrlenA
CloseHandle
CreateMutexA
CreateThread
CreateToolhelp32Snapshot
GetComputerNameA
GetLastError
GetModuleHandleA
GetProcAddress
ReadProcessMemory
RtlZeroMemory
Sleep
VirtualAlloc
VirtualFree
lstrcmpiA

ws2_32

inet_addr
send

wininet

HttpOpenRequestA
InternetConnectA
InternetOpenA
HttpSendRequestA

advapi32

GetUserNameA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ