080b150f3f2bee5884a9298115b86fb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

080b150f3f2bee5884a9298115b86fb0_JaffaCakes118
Size

24KB
MD5

080b150f3f2bee5884a9298115b86fb0
SHA1

117c9efc883735ba09fd47df068491d42c5e319a
SHA256

ddaa5e505c9d0648ba5cd5c06a47ee864ceea23d3e617d87ce56fcbe21253078
SHA512

46096c1e309a4f683afd7332b767465b017e5d06fe5d86e7743776177879db8f64e8d2f947246f061006fde11f0abd8b619d496aea49264ac32bbd4627f216b1
SSDEEP

384:ODu6fOb5d0VCaSumnzuwGTLgvv8EPAAq3WIathsSb2RpAEu83s3:OK6fObsVx1o6nTLOJPFKH+hN2RRt3y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080b150f3f2bee5884a9298115b86fb0_JaffaCakes118

Files

080b150f3f2bee5884a9298115b86fb0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d0c30012b998190e096220967a235d38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
LoadResource
RaiseException
SetCurrentDirectoryA
SetEndOfFile
Sleep
UnmapViewOfFile
VirtualAlloc

msvcrt

_XcptFilter
_cexit
_stricmp
fprintf
free
malloc
rand
srand
sscanf

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ