102d160999439ba655607ca6cc366acd_JaffaCakes118 | Triage

Sharing

General

Target

102d160999439ba655607ca6cc366acd_JaffaCakes118
Size

10KB
MD5

102d160999439ba655607ca6cc366acd
SHA1

7e6a13895dbdc6190afac57366ba872c44b336c7
SHA256

10d12a8bc7f82b37a6c7cf8e86d28b74a380e2dfe12d32ae3d3f915ce392a9f3
SHA512

208b464d4ea4b6c31d75d950f6e78ed610c30397a79b86e81a64ca9e8cf75a317dfa9834815d8b4a5236981e1aea70e8f4b1658f79bed52481c821dbbbc0b91f
SSDEEP

192:G9PIyFXAdMGOQzQLOBLB7s9slGAUqlVRY91Q9PVAGK3WDvWJny:GxVK2slNUcRMQ9iGK3WDvW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102d160999439ba655607ca6cc366acd_JaffaCakes118

Files

102d160999439ba655607ca6cc366acd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

270636080778f12c26c06d1771b1f32d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
ReadFile
VirtualFreeEx
GetProcAddress
VirtualAllocEx
Sleep
GetFileSize
GetLastError
CreateFileA
CloseHandle
LoadLibraryA
VirtualAlloc
CreateThread

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 928B - Virtual size: 917B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 304B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 944B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ