01056b8c8c15a07dcc5998386dd2c8fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01056b8c8c15a07dcc5998386dd2c8fb_JaffaCakes118
Size

37KB
MD5

01056b8c8c15a07dcc5998386dd2c8fb
SHA1

aa4191b69576e70013d739c4e853f58c500f09a5
SHA256

ddd3f947a7133ee379113529f404d131112b0d4aa8f619de7af5f57df6413037
SHA512

dd6420392ab1e59c33acf19c653f7fc0402331aaca72d26604b3cd27d5b6c4eef21572d8709cd5b3733ff951e77db16dfcb700df3f983830aaefb090e852c6af
SSDEEP

768:94FNvJ4/acva8ibGxnfGGfcGff6dbdJKdBdJOLdJIdJOR:9g34/acAGhuGkGe6koE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01056b8c8c15a07dcc5998386dd2c8fb_JaffaCakes118

Files

01056b8c8c15a07dcc5998386dd2c8fb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b1fde03e6f0ecb97386cda71c4fec3fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA
GetLastError
CreateMutexA

wininet

InternetOpenUrlA
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 736B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ