e29003c29a92f0f64e9ad3116478802e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e29003c29a92f0f64e9ad3116478802e_JaffaCakes118
Size

3KB
MD5

e29003c29a92f0f64e9ad3116478802e
SHA1

a207affd4d78212ea033344d0ae7124770a728f8
SHA256

d24216aec659d3673476ea8aef93082abb8e14f53ee7271f549c321a66d2ff4d
SHA512

bdc54c30062ae11d5225a4e861e0cae1a80f6183b36a44aafaec07a313c6c49ecd39fc8433abcbe6379d4f0f112390bf9edf599f1a9de684af4659475f3550b7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e29003c29a92f0f64e9ad3116478802e_JaffaCakes118

Files

e29003c29a92f0f64e9ad3116478802e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9fefa2e168f7835fb478674885246394

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
lstrlenA
GetProcAddress
GetModuleHandleA
WaitForSingleObject
CreateProcessA
Sleep
CreateThread
DisableThreadLibraryCalls

msvcrt

memset

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ