46832f9c82a868166a27d7c05bb228da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46832f9c82a868166a27d7c05bb228da_JaffaCakes118
Size

8KB
MD5

46832f9c82a868166a27d7c05bb228da
SHA1

31e171021388323de3bef5c9e64c7a9b1cd3cb61
SHA256

6625010f0afdbf1da4f9e62c60d7fdb1dc7a03b160717e0b09b0d41370831e13
SHA512

c217734922b15bb603a6fdaa7897c71ddb70b20ff5a67b9133707f7f12f48a0b14c561f322a1eb0f3cda34a33aecd8d78eb0732b84cede119f1522232455dd04
SSDEEP

96:1YOzSka9OYOuEjtdbugWnU442uAA57vRrcrmLU:3zSuYOuEjtdbtveA57vRgrmLU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46832f9c82a868166a27d7c05bb228da_JaffaCakes118

Files

46832f9c82a868166a27d7c05bb228da_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4b1521ce6c8059a7bd94f4d12cfbaab4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocalTime
GetVolumeInformationA
SetFilePointer
Sleep
WinExec
GetDateFormatA
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
DeleteFileA
CreateThread
CreateFileA
CopyFileA
WriteFile
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetUserNameA
RegSetValueExA

user32

FindWindowExA
GetDlgCtrlID
GetForegroundWindow
GetWindowTextA
SendMessageA

wininet

InternetGetConnectedState

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ