0a198a7d84fca136a5d5c99f89b8345c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a198a7d84fca136a5d5c99f89b8345c_JaffaCakes118
Size

48KB
MD5

0a198a7d84fca136a5d5c99f89b8345c
SHA1

32a7a51bbde0969104ec801accc814c85500f2ed
SHA256

b811eca4662fd84e460fcf6c077eb772857f616085e19a4d6903a90501805f7b
SHA512

6bc66070babf26a79aeb6b970acb8b490f1cada58f661ae13843710219b316d6b75d9228eaa21b50d4de76ebb2fcfd5f719996c61550778be2df849d7ffa0dee
SSDEEP

768:0HeO54/rsFNjCKH8H0jbng2WxXHRDMzwyy7JXo9Qz:okrszj/cHKPWXxIo5o+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a198a7d84fca136a5d5c99f89b8345c_JaffaCakes118

Files

0a198a7d84fca136a5d5c99f89b8345c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f615756c1492345f9e62cf3f9046db9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
CloseHandle
GetStdHandle
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Exports

Exports

DllInit

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ