41490941b67c4a1f4bc4a9aa365af866_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41490941b67c4a1f4bc4a9aa365af866_JaffaCakes118
Size

18KB
MD5

41490941b67c4a1f4bc4a9aa365af866
SHA1

0dab6fa01cc3d27c855cb457c2a44cf8aa6df858
SHA256

d11a1d275c8b658201001a6fa9924413a8882defe38516f7d0e799e3e6268543
SHA512

333f582014e621a13da2c82ccb831b837a4a6b09fe24a31eca61f91b3b94fe8c3bdca48f6fb5e7c862a5200bc3e38bbe782af09d028d48f043d28a6a9c53ba24
SSDEEP

384:vBHo7xX9iGgOa7Pfp+/BRiBZWG5VL3ArCQBE+DmTVrUXiJP:67TiGgH7PR8BnKVL3L+DmTqXUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41490941b67c4a1f4bc4a9aa365af866_JaffaCakes118

Files

41490941b67c4a1f4bc4a9aa365af866_JaffaCakes118
.dll windows:4 windows x86 arch:x86

20099336c40ad9e811ec8e19294eafa3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
GetSystemDirectoryA
TerminateThread
SetThreadPriority
CreateThread
GetModuleFileNameA
DisableThreadLibraryCalls
FatalAppExitW
Sleep
EnumSystemLanguageGroupsA
EnumSystemCodePagesW
CreateProcessA
WriteFile
GetTempPathA
GetLocalTime
VirtualAlloc
VirtualFree
CreateFileA
GetLastError
CloseHandle
LoadLibraryA
ExpandEnvironmentStringsA
GetProcAddress

user32

GetCursor
GetDC

wininet

InternetReadFile
InternetCloseHandle
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA

advapi32

ControlService
OpenServiceA
DeleteService
OpenSCManagerA
CloseServiceHandle

msvcrt

sprintf
memset
_except_handler3
strcat
strcpy
strrchr
strlen
memcpy

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

heU7hfY
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ