10c656fba2d72645f879e8d24a11fce4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10c656fba2d72645f879e8d24a11fce4_JaffaCakes118
Size

10KB
MD5

10c656fba2d72645f879e8d24a11fce4
SHA1

006cea060fdb4207ff8acca487c556ac54956190
SHA256

c15765a0715436b95d964ba125614c2472f9b8f0b9294d7c0ba8144912f2dee8
SHA512

d9117a7ad6d870b0a7528e4ad2a93e432d464dc6f793c515c5ad93ba8fce7bd2ae400e8d9a3e5aed949f73df6bb4576fb4f05287acd5b16492dec5ecea07f1df
SSDEEP

96:JvfbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbJkbbbbbbbbbbbbbbbbbbbbbl:JtGuzKy+Gi4dKF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10c656fba2d72645f879e8d24a11fce4_JaffaCakes118

Files

10c656fba2d72645f879e8d24a11fce4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3d175b14d19c5625de5204fcd8b9c41c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
lstrlenA
FindClose
GetLastError
HeapAlloc
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
HeapFree
GlobalAlloc
CloseHandle
lstrcpynA

user32

wsprintfA
CharLowerBuffA

advapi32

RegEnumValueA
RegOpenKeyA
RegCloseKey

wininet

FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
InternetCrackUrlA

Exports

Exports

CheckIEHistory
GetVerID

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ