feac65c8d4a49d58c23ec545157e5057_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feac65c8d4a49d58c23ec545157e5057_JaffaCakes118
Size

116KB
MD5

feac65c8d4a49d58c23ec545157e5057
SHA1

44abd2d62ee852eb4e69378020fba0f09f84eb0e
SHA256

1a2e70bfc145238e98d7712192a7f6347c776dc61f46f974a8c85a22d26a049c
SHA512

44bc46e200d709f60e5afeb1278aaa422b703b7bce4f9115a33a43e0dcf9040c3bbe4906437226e9a482e7e17314ded7a5587ca1ded19f1df06e83baeff6aed2
SSDEEP

1536:f4Xob1lQVQT96kQIDOzae5ekOO6+WydLeq6pHBv+vq0lJEIs9//m:f4Xo1lQYE5P6+WyVr67+Jns9/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feac65c8d4a49d58c23ec545157e5057_JaffaCakes118

Files

feac65c8d4a49d58c23ec545157e5057_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6cb19f17002e516e1149ff57cdfde5fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
MoveFileExW
GetPrivateProfileSectionA
ReadConsoleInputExW
DnsHostnameToComputerNameA
LoadLibraryA
BackupSeek
CopyFileA
GetCompressedFileSizeW
WritePrivateProfileStringW
GetSystemDefaultLCID
IsValidLocale
Process32FirstW
SetHandleCount
UnregisterConsoleIME
GlobalAddAtomW
GetConsoleAliasesA
HeapReAlloc
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ