3ae1cb03a1a3d57a70770c3911aae06f_JaffaCakes118 | Triage

Sharing

General

Target

3ae1cb03a1a3d57a70770c3911aae06f_JaffaCakes118
Size

17KB
MD5

3ae1cb03a1a3d57a70770c3911aae06f
SHA1

523b69ab60143d0f25fa383255f58da4d1cf6895
SHA256

d24cdc42cc8341659ed9781503d89c1416d6744779265462bab5771fe707f5d4
SHA512

30504f3b3727d948696c96efce80e11717d536130ba30a3be2a9090c89487afe1a66d13191486db4f64b79d4877d2b7df1d1547b4765b783adfe0b40c6f8e23e
SSDEEP

384:v5cxLWbw9krIWpQcmqzfuXpdndkSMgekXhzOrwOqcd6cSSQ04:vyQQiTuXpgZ7kXhzgvvd6kj4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ae1cb03a1a3d57a70770c3911aae06f_JaffaCakes118

Files

3ae1cb03a1a3d57a70770c3911aae06f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

de520a53e40a7ad18ec2f642f5749acb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
lstrlenA
ExitProcess
Sleep
lstrcpyA
lstrcmpA
lstrcpynA
lstrcmpiA
GetTickCount
GetSystemTime
GetPrivateProfileStringA
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
CreateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
RtlUnwind

user32

CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
PostThreadMessageA
FindWindowA

wininet

HttpOpenRequestA
InternetCloseHandle
InternetOpenA
InternetQueryDataAvailable
HttpSendRequestA
InternetReadFile

Exports

Exports

jxgzof
jxgzon

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ