1765cc0bb332966ce5f4036c5e39b050_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1765cc0bb332966ce5f4036c5e39b050_JaffaCakes118
Size

85KB
MD5

1765cc0bb332966ce5f4036c5e39b050
SHA1

e5323c8bd85bef1a22ae01ffcc45e485d40334a7
SHA256

c9c7c52823b0ef19b80d9172bce9ec1d3f9fd5f720c3cf149fa2faa9195df186
SHA512

6c4ebdeb97ebdb7afbc9591e27643303b3aa64c752204d14c0ec0a41411a6ceab2e8a8794ec9408a942aecaaffd691fd3ad315ccba935984519bf6733e3010f8
SSDEEP

1536:MZKWV/avOmNqGlsnKimH9t/E0B5bXarmpBO2ftby26QshsF07v/xrqv8RrzN:M0WgqGlsnKiW/BrarS/fd6rF7RrS8FN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1765cc0bb332966ce5f4036c5e39b050_JaffaCakes118

Files

1765cc0bb332966ce5f4036c5e39b050_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f579537dc49ac210a45476585b50c0a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
GetLastError
CreateMutexA
SetLastError
GetModuleFileNameA

msvcrt

sprintf
memcpy

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE