29fb5f0d76cd2a480638f88821ebbcdf_JaffaCakes118 | Triage

Sharing

General

Target

29fb5f0d76cd2a480638f88821ebbcdf_JaffaCakes118
Size

8KB
MD5

29fb5f0d76cd2a480638f88821ebbcdf
SHA1

a6acc6ae63d745c01a0285bc174874632352467d
SHA256

eaf6f6ff0254c4998de1057c4ec1b0d43018d7a3bde09e6646ae5a4672a6320c
SHA512

d7a369d1662baf959f32ecca7b9f5b15662c33056ad0db9fa141eac360b37e08290dcf4d9a0605cf4e91f496efece327f75dcffb816a5ac683d27c32ef32991d
SSDEEP

96:AEfg/3zv4eMdKFKL/ZMJfEdV0Ah1M3mA3YQ5+kgtO2jOIdKFkN:AEu3zv4TKFCGREdV06zKKF7dKF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29fb5f0d76cd2a480638f88821ebbcdf_JaffaCakes118

Files

29fb5f0d76cd2a480638f88821ebbcdf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4b5f54871f6906664c129064b2710d04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
lstrlenA
GetLastError
CloseHandle
HeapAlloc
SetFilePointer
CreateFileA
GetModuleFileNameA
HeapFree
GlobalAlloc
ReadFile
lstrcpynA

user32

PeekMessageA
CharLowerBuffA
wsprintfA

advapi32

RegEnumValueA
RegOpenKeyA
RegCloseKey

wininet

FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
InternetCrackUrlA

Exports

Exports

CheckIEHistory
GetVerID

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ