436f407646afba79b9a5e8cda791dff7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

436f407646afba79b9a5e8cda791dff7_JaffaCakes118
Size

15KB
MD5

436f407646afba79b9a5e8cda791dff7
SHA1

3f7aa258058d4a28c6a8e20bdea984791996c2a4
SHA256

2c58ae8260e7db86d3693bf67c7a67f5fa545f1f24b8454a4e698602368a4a0f
SHA512

150c7b2041035ed5b8ce6997ccc4532bf6983a6ba81d1d9171f7147a26d0016aeb92145f58e7a33ecbe5d27aff925dfd7dc70c1ab1b909dbcdd28bcbf19c45c9
SSDEEP

192:118zB+WjcWf6TUY2h0EYkkpPIzzLyupMtiqK84Ws1NRHBlcr:1uMWjcWf+w+ESAze4MFK84WmHM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
436f407646afba79b9a5e8cda791dff7_JaffaCakes118

Files

436f407646afba79b9a5e8cda791dff7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5a0f2b72c10e86da3b6f4885c23e158d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
Sleep
GetProcAddress
LoadLibraryA
GlobalAlloc
CloseHandle
GlobalFree
SetFilePointer
GetModuleFileNameA
GetTickCount
lstrcatA
CreateThread
DisableThreadLibraryCalls
VirtualProtect
GetModuleHandleA
lstrcmpiA

user32

wsprintfA

wininet

HttpSendRequestA
HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
InternetConnectA

Exports

Exports

DllCanUnloadNow

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ