eb553021ae817c6d0c6d52f15c077d23_JaffaCakes118 | Triage

Sharing

General

Target

eb553021ae817c6d0c6d52f15c077d23_JaffaCakes118
Size

86KB
MD5

eb553021ae817c6d0c6d52f15c077d23
SHA1

8b6eae586d18827a4e349a6e0bc23b02c14da03d
SHA256

e96c6480a67ed7feb582e347b21fbc8e86b5d7c6b50488045ebbced99c873261
SHA512

2685b944bf122a4a867d1b661e0e088a5f52a6a8edba1eea369dfe5be23658bf5280a73ade2e0be0bc34b328b44c27a4a31475d412f23117c7eef90edb51b8d8
SSDEEP

1536:BZrgb/41kdOm0Zd7L29AOH9ytMxffVCj5bYPJwvU+qsUvc1GJ3rCn:BRg437iAOdyaxffVq5MeT6c1GJa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb553021ae817c6d0c6d52f15c077d23_JaffaCakes118

Files

eb553021ae817c6d0c6d52f15c077d23_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f579537dc49ac210a45476585b50c0a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
GetLastError
CreateMutexA
SetLastError
GetModuleFileNameA

msvcrt

sprintf
memcpy

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE