15e262f5eb05e10feac7de2dceb644d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15e262f5eb05e10feac7de2dceb644d0_JaffaCakes118
Size

35KB
MD5

15e262f5eb05e10feac7de2dceb644d0
SHA1

4d2bdb46827a6a7af17556e53a4aa9f1346e0481
SHA256

c3df2467e7113dd83d494a0a2671f842a5d7886356036f9ce9f295c9132b4230
SHA512

15a81c558355d6efa572584f4b42ecb0a43313fbd5bbb07dd583d3804883d7122a3bc5526d034c19c0f963467a613bab54b2a6bafd25034fad9e21b81e001712
SSDEEP

768:QlPbmUWoiW82bNEzMhmqTo0PhUfV3X+bf9RjvLZKrXjCp/We2E:28pC6MhmqTFhc3X+bffvwr+f2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15e262f5eb05e10feac7de2dceb644d0_JaffaCakes118

Files

15e262f5eb05e10feac7de2dceb644d0_JaffaCakes118
.dll windows:1 windows x86 arch:x86

f3204ed8421fe00da705766a059767c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

comctl32

InitCommonControlsEx

kernel32

CloseHandle
CreateFileW
ExitProcess
FindClose
FlushFileBuffers
GetCommandLineW
GetFileSize
GetFileType
GetLastError
GetStringTypeA
GetVersionExA
GlobalAlloc
GlobalFree
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WriteFile

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear

user32

CharLowerBuffA
CharNextA
CharUpperBuffA

wsock32

closesocket
WSACleanup

Exports

Exports

PER119

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ