0b6e02f5cdad919bda5f3f2befabf27c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b6e02f5cdad919bda5f3f2befabf27c_JaffaCakes118
Size

2KB
MD5

0b6e02f5cdad919bda5f3f2befabf27c
SHA1

624bf3b5a4cc96d2462e3f09bf0890ca3517e0e5
SHA256

13e123eb94cad8247123ce4ed29309726af3cfcd5f5bb198ab4c8f72d9daba42
SHA512

a07c7d526b4944480c0d680cf375129586748207413f8c3a75858564a6765d19485cffb0c8970ace277a06f7fd425bd8d7d44673bc35eacb553ee0e82e72c073

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b6e02f5cdad919bda5f3f2befabf27c_JaffaCakes118

Files

0b6e02f5cdad919bda5f3f2befabf27c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7b20821f7009d8c5c8fe38b545a6fdce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
CreateThread
GetModuleFileNameA
SetFilePointer
ReadFile
GetTickCount
GetWindowsDirectoryA
lstrcpyA
lstrlenA
GetVersion
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
HeapFree
HeapAlloc
CloseHandle
CreateFileA
WriteFile

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 104B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ