2166855821c6f35396adb9461048aa13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2166855821c6f35396adb9461048aa13_JaffaCakes118
Size

94KB
MD5

2166855821c6f35396adb9461048aa13
SHA1

7973ff7a07f1c168839ccf784f7ee1976f0d9def
SHA256

82af5e639ff497f211ae5af964c4881ea7392decfe146767129dd5974434d24f
SHA512

cb99bd496983a1326f4dbc52e123001bc36c45be2ca523b691ef954fa824a9c38c763203a7e13444206a2cc45a1a30cfa8542445c9698a4d49b314ca4174cc94
SSDEEP

1536:HQICl/ZxAMtyIXyYc0jLqUVp91pW65hHlqAZUilqtYHmpfZ:wI8/xytejLqUVpnc6pqAwYHmpfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2166855821c6f35396adb9461048aa13_JaffaCakes118

Files

2166855821c6f35396adb9461048aa13_JaffaCakes118
.dll windows:5 windows x86 arch:x86

d9e14945c3974fd1f488b128cb6adb49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

PeekMessageA
SendMessageA

Exports

Exports

Nuubtkbvki
CloseCftjhhlkalw

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 3KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ