3f4a589457dd0982410702602cc06d50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f4a589457dd0982410702602cc06d50_JaffaCakes118
Size

18KB
MD5

3f4a589457dd0982410702602cc06d50
SHA1

a2a8fe8214a02f99d022dfc333e4bba9521da72e
SHA256

0213d982283a1a6251ab917ac8a4636d6aec5db86f5e2302ddc7682d768638f7
SHA512

c4f0fb8cd25e502718b42cf62c4cfedf4e07a7d930f5b5d028146e7173e963472b501b68d8134f69090d96ebef5f87a0e98deafff4080f1970744d5688e73f75
SSDEEP

384:X8CiGC+GoC37M6F0yWqYkD68PD1+Xm/UL/60viKD0i:XriO27MUWXkvD1+XXL/XvnD0i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f4a589457dd0982410702602cc06d50_JaffaCakes118

Files

3f4a589457dd0982410702602cc06d50_JaffaCakes118
.dll windows:4 windows x86 arch:x86

77b3b357d896f29f8a7f7f3eec977958

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateFileA
CreateProcessA
WriteFile
GetTempPathA
GetLocalTime
GetCPInfoExA
CloseHandle
TerminateThread
SetThreadPriority
CreateThread
GetModuleFileNameA
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
GetSystemDirectoryA
DeleteFileA
Sleep
LoadLibraryA
GetACP
GetProcAddress

wininet

InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle

advapi32

ControlService
OpenServiceA
DeleteService
OpenSCManagerA
CloseServiceHandle

shell32

ShellExecuteExA

msvcrt

sprintf
strrchr
strlen
strcpy
strcat
memset
_except_handler3
memcpy

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ