104941053a378ec67701c552c8e255ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

104941053a378ec67701c552c8e255ae_JaffaCakes118
Size

26KB
MD5

104941053a378ec67701c552c8e255ae
SHA1

4cba496a7ca924608fe7296e4440f3b45414e736
SHA256

bd5a3a81a9e7ae6029d32f12ed447a3002f36e06a94743414d20331a7c1f9a37
SHA512

2b5f851138188f830be80077a4070c5b4bf3827f0230af28e84ed3e7dc7771c0bdad525755f188b5ec3da5afacd648440925b24ad1bcc74df320efc0a38a31ed
SSDEEP

768:9h/TvvQhRjbacva8F8SlfnGf3XiXiXGXqXIUGXX:9hLQ/Pach1/GoUw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104941053a378ec67701c552c8e255ae_JaffaCakes118

Files

104941053a378ec67701c552c8e255ae_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f167a2b51bb2d34cdeb753949bb79bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 702B - Virtual size: 702B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ