104b2ddda35321c22fa250df46e228ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

104b2ddda35321c22fa250df46e228ab_JaffaCakes118
Size

415KB
MD5

104b2ddda35321c22fa250df46e228ab
SHA1

2ba8542ef348d891f4b96939842341842358f395
SHA256

d7bc8af33d84b60ee64b9c1c2c56e1605112999ae74d3e135e4759013df74076
SHA512

e2bf22a386e258930eab0ec3ce1bf2cb16d7a4f5dc7257de9b2601eca1cc52550a1a7421e04e0bdf66e22540b7c55775f6e0ee38a7427157e5313c8026f61ad9
SSDEEP

6144:dhX+LOdAzKvjkAZrjW9L+cpB1PB+KfhoYCTbSmMTXiB/jqGVB03e+6C+J:uzzkkCqB+MB1plpkgLiBbL703e+6CI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104b2ddda35321c22fa250df46e228ab_JaffaCakes118

Files

104b2ddda35321c22fa250df46e228ab_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6fd297f35387e8feac0c68d36286ea44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ald.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetDevicePowerState
CreateDirectoryW
Beep

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 380KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ