07b9aa01b51d129f082148903d2789a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07b9aa01b51d129f082148903d2789a9_JaffaCakes118
Size

132KB
MD5

07b9aa01b51d129f082148903d2789a9
SHA1

e6223a68687654f313b40be94bce2ba000eb7d18
SHA256

0da24496c6b66eb0e12d558e0a3acec59c5c0cf285047ca023c72ca659afc022
SHA512

ffca0ddccbb075f3455418e7d1ef7953c385e7c48c2afeb8cca47acb8ded0bdb659c6228b7941fd500c1cbaf0a81a72fb66d8327083d18dc9f76b7206a6a858f
SSDEEP

1536:OVRbPEbPYVS3aXpk/q1p5aJYFqh7EGCqgPHR5lTUOBoWzU/yZ6Ui9kC4k:cbPEbPYVSWpk/qBnF4FC76/fn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07b9aa01b51d129f082148903d2789a9_JaffaCakes118

Files

07b9aa01b51d129f082148903d2789a9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4dce087041d803114bf5927f8ede64cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
GetFileAttributesA
GetLastError
ReadFile
Sleep
WriteFile
GetFileSizeEx

Exports

Exports

principal

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ