0801f811b444c189d8f86435f3d0a9d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0801f811b444c189d8f86435f3d0a9d6_JaffaCakes118
Size

17KB
MD5

0801f811b444c189d8f86435f3d0a9d6
SHA1

f314d479251606f71cf370a71ee4a4eb69d94ccf
SHA256

f7b612b7b8786d1cd60163f8b0caf596d953919bb5e71a2ab4c2db19e83e6d93
SHA512

7cc88ee2874bbf53d7d0a54c35898b40170675c9cd654283621140b33b5d202e2f464cf4b80ddcc797b9d756fb41e957d65ff33d2097e7e508035b06ef38d2ac
SSDEEP

384:EUAj8i4Awj6UAzevMFTTb8c/ORIg/9Uox:EFjoqze01SRD/9Uox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0801f811b444c189d8f86435f3d0a9d6_JaffaCakes118

Files

0801f811b444c189d8f86435f3d0a9d6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ac9eefc1d606a487b77a6d5b4996073d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
lstrlenA
GetProcAddress
LoadLibraryA
GlobalAlloc
GetLastError
CloseHandle
GlobalFree
SetFilePointer
GetModuleFileNameA
GetTickCount
CreateMutexA
ExitThread
lstrcatA
CreateThread
DisableThreadLibraryCalls
VirtualProtect
GetModuleHandleA
lstrcmpiA

user32

wsprintfA

wininet

HttpSendRequestA
HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA

Exports

Exports

DllCanUnloadNow

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ