0f7b1910dabf85af35ff1dc419f516c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f7b1910dabf85af35ff1dc419f516c8_JaffaCakes118
Size

3KB
MD5

0f7b1910dabf85af35ff1dc419f516c8
SHA1

b98bda3948231709788dc11dbb4c282f22907e7f
SHA256

ac62b553d946af0d8dd094f22cb218c6d0e697a67613b852f836636dd9e29f5a
SHA512

50a55ec0f37407a6aeacfa1c6b2367e979360a4f1ae5d0b14b5ad48cb56adc1641b4dc9cab2bf59a0eecd60f727f2d4a52bb286fcd10a8956b8c1ea42b2f27a9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f7b1910dabf85af35ff1dc419f516c8_JaffaCakes118

Files

0f7b1910dabf85af35ff1dc419f516c8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4db1882ec4e9140b1226625ebff639bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Documents and Settings\whg\桌面\工作\Sxl\AppInitDll\Release\AppInitDll.pdb

Imports

kernel32

LoadLibraryA
Sleep
CloseHandle
CreateThread
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
GetVersionExA
GetStartupInfoA
FreeLibrary

Sections

.text
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ