17517f01d32c7304d2c944f75235639b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17517f01d32c7304d2c944f75235639b_JaffaCakes118
Size

18KB
MD5

17517f01d32c7304d2c944f75235639b
SHA1

b5b3d1a8769015cd304a8a0639b6878d1f8ebd30
SHA256

d9270fa3e9557188ea3465643b0a840cfb6c72a51a4d144f62e15a12d8f673e6
SHA512

4fb2c05eae36ffec30563cbe3a3be3c0f9dac6c439abdde6711e1c4e5f70ae9342d29c4ea1c9cdba0676b5c56f84313078d63c20574682c9aa165eb13d6fadb1
SSDEEP

384:xaBzKTmYYpkiwCm+7fdTn4BQJUt6brjbM+m5zRqNUJ4i11R1P:YKSpwsV4OmYbY+m5zpJ4ib1P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17517f01d32c7304d2c944f75235639b_JaffaCakes118

Files

17517f01d32c7304d2c944f75235639b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

701763e5666907c3bba221ced3279e7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
GetTempPathA
GetLocalTime
TerminateThread
SetThreadPriority
CreateThread
GetModuleFileNameA
CreateProcessA
FlushConsoleInputBuffer
FlushViewOfFile
FreeEnvironmentStringsW
FreeLibrary
VirtualAlloc
VirtualFree
GetSystemDirectoryA
DeleteFileA
Sleep
CreateFileA
GetLastError
CloseHandle
LoadLibraryA
DisableThreadLibraryCalls
GetProcAddress

user32

GetDC
GetCursor

wininet

HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

gdi32

GetPixel
GetBkMode

advapi32

OpenSCManagerA
DeleteService
CloseServiceHandle
ControlService
OpenServiceA

msvcrt

memset
sprintf
strcat
strcpy
strrchr
memcpy
strlen
_except_handler3

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

idG6hr
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ