0617554a69c4c693fb9af831d89aee67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0617554a69c4c693fb9af831d89aee67_JaffaCakes118
Size

92KB
MD5

0617554a69c4c693fb9af831d89aee67
SHA1

85bb1443f221056f49701754aa68227a7cc99be6
SHA256

17ece3c60bc6327522b4409cf430ca5acbac824ebf83331c07f4f1064f6d27be
SHA512

d712a3c6366d8f7cd76c9b0de2981cdc3396f38f56fbaf0e28e757205bc6ecbd5f768a024406ba6b9a5429785878ea4c4a4d23c5997f590b6421815593fd203b
SSDEEP

1536:Ggb5Um3zNTrrtsJKxVJOFECidifu/T0N8yk8RlgufQtpRxnUVS75Mc1+7X5:Ggbz3hTrrtscxVJEE7WuL0NjPIuYtpR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0617554a69c4c693fb9af831d89aee67_JaffaCakes118

Files

0617554a69c4c693fb9af831d89aee67_JaffaCakes118
.dll windows:4 windows x86 arch:x86

aafa0239272c25265a2ea79d8c8da6e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
ExitProcess
GetPrivateProfileStringA
LoadResource
SetCurrentDirectoryA
TlsFree
CompareStringA

Sections

.text
Size: 25KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ