2428dfa5af4dd5d9f0d86691bd41517e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2428dfa5af4dd5d9f0d86691bd41517e_JaffaCakes118
Size

132KB
MD5

2428dfa5af4dd5d9f0d86691bd41517e
SHA1

d66c54cdf5a43adc6c444e970252dd1c7ecd556e
SHA256

d9dd4dc0f2b83d671a9591a06b1f875da54ae86960da7f8f51e0e4d654087522
SHA512

162516099c857f37ec7a7c3ec18155198f2cb647f292636715611acc0dd48840073b94f1317481167619074c07d274e0f809563eab589ac2ec616c9e850dd113
SSDEEP

3072:1K0cUX48d+AI4h8vwZoY0HWhNeRFRQJcsm/Tz9lDtTnwI:1ncUIwdVh8vwH0HWSRBsm/Tz9P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2428dfa5af4dd5d9f0d86691bd41517e_JaffaCakes118

Files

2428dfa5af4dd5d9f0d86691bd41517e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b1631f367d0c49197c36a1bc0fcff3a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
GetModuleHandleA

Exports

Exports

febzgucphctarebunspxzq
lzpxtzpiieblvqhjpwod
vwqytavnwuqpsjduglrvx

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ