1bc25463af48ba6f58b32b743d8d9a0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bc25463af48ba6f58b32b743d8d9a0c_JaffaCakes118
Size

1.2MB
MD5

1bc25463af48ba6f58b32b743d8d9a0c
SHA1

2e991b4ac41bf8574fd596a558786569c90692d6
SHA256

ed0b69f7111c2777fa8cc7de86b45bee8c0da487e7437c056f44f864b5864db6
SHA512

5ab195b8b4ad0d78fd1b2c63a80af56678cb634b59e4d2101c247758bba3e909d813b9c178fe8ed190d4b1da71ce45dd055c6663510ef5ff0f1c4c04e48d15e3
SSDEEP

12288:e5g0quxX//LZwMHqKltcWcqCumjSYVIyLpqa6KoEwEtQKdk6Na0iMQzg8kE2iB/c:Wg0qK//LZwMKKdHmHVIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc25463af48ba6f58b32b743d8d9a0c_JaffaCakes118

Files

1bc25463af48ba6f58b32b743d8d9a0c_JaffaCakes118
.dll windows:1 windows x86 arch:x86

7be2d575e5bebe5ae32036c47619a892

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetOEMCP
GetCommandLineA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetACP
GetEnvironmentStrings
GetCPInfo
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ