0d7759d1a77b4d59c164d8d08cdf3425_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d7759d1a77b4d59c164d8d08cdf3425_JaffaCakes118
Size

274KB
MD5

0d7759d1a77b4d59c164d8d08cdf3425
SHA1

f7745befc34b4526a89276f659b382b85463fbce
SHA256

1b08bc206ada051ff8d2c6c15773e6b47e905dff27e370542770f7fc754d9383
SHA512

49a903ad74cd275d8a910a5535200799292c308cb525cd82b9dbb0c4916e33d07c733a70d48ddd72ce10e4e0cde29f770514ec067c6889616474c47e6dbd4c2c
SSDEEP

6144:xDboQh1/Y0CYl1CVHmOK2jIhCyYaxgIXeR6dYC1qRs3tePFjvB:xDMQX/pCmwV62wCFxG7URrZvB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d7759d1a77b4d59c164d8d08cdf3425_JaffaCakes118

Files

0d7759d1a77b4d59c164d8d08cdf3425_JaffaCakes118
.dll windows:4 windows x86 arch:x86

31f2be8fcaead81e1b9a1381110593a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeResource
GetDateFormatA
LoadLibraryA
LoadResource
RtlUnwind
SleepEx
ExitProcess

Sections

.sforce3
Size: 26KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 242KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ