f97d912bf6751a1fc6d9cc5cd1e466fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f97d912bf6751a1fc6d9cc5cd1e466fa_JaffaCakes118
Size

68KB
MD5

f97d912bf6751a1fc6d9cc5cd1e466fa
SHA1

c876d4cc3a773fef560c84e362a59e08864d3180
SHA256

31f74d651db6f45be3968aca6708af7e2d89f409376c85e6812a69128c020a75
SHA512

e0042b4901e35ecf7425cbe89957dc8b0c15057792940f208fd77fabad7b73e6040151584e95bc03b58f23b6c4279bc2653b0a8f2a388a1b431d5e2a2dd26be2
SSDEEP

1536:Izs651vo9vy5JaBHPwcoJ587ejE5sj5/Jlk6z5/b0aCRT+xShV:IAEQ1SJaJYcekb8i6z5/bNoV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f97d912bf6751a1fc6d9cc5cd1e466fa_JaffaCakes118

Files

f97d912bf6751a1fc6d9cc5cd1e466fa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

28da4fa894f84c746e629e6c56db4f35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsFree
GetVersion
ExitThread
ExitProcess

advapi32

RegOpenKeyExA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ