0f4a4a9c7ccd9698fb635234065c3ee0_JaffaCakes118 | Triage

Sharing

General

Target

0f4a4a9c7ccd9698fb635234065c3ee0_JaffaCakes118
Size

2KB
MD5

0f4a4a9c7ccd9698fb635234065c3ee0
SHA1

0c77b6b9b0e552e64e504072e501eee88a59a6c3
SHA256

e8c66a601de8bd36fae1db1d88352940c13b6c8557eaa973bb09ba311c4b1b3b
SHA512

4069cdb35423d5b90d1cd7ff9189fdb824c7a678fece778ed9126dff955b48f1ef70050fe7c50cb6d43461e4bd756109ad68e32f0983cb41b1905912552239b5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f4a4a9c7ccd9698fb635234065c3ee0_JaffaCakes118

Files

0f4a4a9c7ccd9698fb635234065c3ee0_JaffaCakes118
.dll windows:1 windows x86 arch:x86

6fc39f96f87c766adf5446f89fdc6166

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
FindFirstFileA
GetLocalTime
GetSystemDirectoryA
GlobalFree
Sleep
VirtualAlloc
VirtualFree
WriteFile
lstrcatA

ntdll

ZwShutdownSystem
RtlAdjustPrivilege

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegSetValueExA

Exports

Exports

install
on_load

Sections

.flat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE