1b846a518c758b8197d8416ac2015faa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b846a518c758b8197d8416ac2015faa_JaffaCakes118
Size

60KB
MD5

1b846a518c758b8197d8416ac2015faa
SHA1

3fd2f296b17059335c54fd88eb988681d1d910f8
SHA256

1a283cd320bd804ab18401f14c4b4465684b92c730632c4e0bb95b811ffc6043
SHA512

e495279c17612ec254b29442fbef363e285443f3d4cc1207d1599559ef32f91d600a56df0cb91ed6d3f9604bd97aace51d0934d441b247b8c3fb8ed999ffe6c8
SSDEEP

768:CiGYZKvjVKm8//JL9ghRCWuJccGciAoce9fm+RUebbpuVDXJxP6UT/:CBYspIQLCWBce9fmsUeHpUDXF/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b846a518c758b8197d8416ac2015faa_JaffaCakes118

Files

1b846a518c758b8197d8416ac2015faa_JaffaCakes118
.dll windows:4 windows x86 arch:x86

91ef2d7e4594bc43964fd37054dd1742

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

python23

_PyObject_New
PyObject_Free
PyThread_release_lock
PyThread_acquire_lock
Py_FindMethod
PyInt_FromLong
PyString_FromString
PyModule_AddStringConstant
PyModule_AddIntConstant
PyModule_AddObject
PyErr_NewException
Py_InitModule4
PyType_Type
PyExc_ValueError
_PyString_Resize
PyErr_Format
PyArg_ParseTuple
PyExc_MemoryError
PyErr_SetString
PyEval_RestoreThread
PyEval_SaveThread
PyThread_allocate_lock
PyString_FromStringAndSize

msvcrt

_onexit
_adjust_fdiv
_initterm
calloc
malloc
free
__dllonexit

kernel32

DisableThreadLibraryCalls

Exports

Exports

initzlib

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ