0ae581e7174f31500ef513446da5206c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ae581e7174f31500ef513446da5206c_JaffaCakes118
Size

272KB
MD5

0ae581e7174f31500ef513446da5206c
SHA1

0cdbb4b15a192c1b1b145c46b4e73d1ba38870eb
SHA256

7de7e310b3aaa9b64ce2cdb356e96645c9d935aba12d3d8c104e5de7624d0c60
SHA512

2a305d680cb1b353afaefbfcf7ac33aea8504b017fad8dcd5c0b674c6043a7a6fb36be461bfd0c420619bd9fcc42153efca4bea184bf41a04858d5a259909c83
SSDEEP

6144:WBnQyzB19jX8hSm0OUOE3lp44UXfus23jM/0IlybFtZhO8Dx:WBQyBPssm0OU73oYsCM8IlyBtVx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ae581e7174f31500ef513446da5206c_JaffaCakes118

Files

0ae581e7174f31500ef513446da5206c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d428e0374460bf1ca8e98eea2bc3c097

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceTypesA
ExitProcess
GetStartupInfoA
GetTimeFormatA
GetVersion
OpenFile
SetEndOfFile
lstrcmpiA

Sections

.sforce3
Size: 25KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 242KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ