b0489767e1fc3f908ca25fca5486ac8f_JaffaCakes118 | Triage

Sharing

General

Target

b0489767e1fc3f908ca25fca5486ac8f_JaffaCakes118
Size

23KB
MD5

b0489767e1fc3f908ca25fca5486ac8f
SHA1

987821c73c0019e14f46dee1c2d12c2800785834
SHA256

586dc91f13f8c0c7a99d7b1477d03e00904fbf744a12d525d989b31cafc0244b
SHA512

352e02e5d8a83beba2471b65fbbee4919b94d026aa4e8d9fd9b1474bb62b0ae67424b8fb064f4a75393bd2de88d13c46e597bb274cffd276b2196b78f7b761d3
SSDEEP

384:YxsqJ3vAy3ruTnbG2pxGsodoOiE9UlvZl4PW0eaEdK0tt2tKSNNLE+C654C6A:0DJ37ruTaSAJdoBJZlKneNdptt204lEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0489767e1fc3f908ca25fca5486ac8f_JaffaCakes118

Files

b0489767e1fc3f908ca25fca5486ac8f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

467aba1d009f28b50ac738991c04ab47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
Sleep

Exports

Exports

Control
FreeBuffer
Release
Start

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 317B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ