25e988e66685efd4348b00d28c741e96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25e988e66685efd4348b00d28c741e96_JaffaCakes118
Size

84KB
MD5

25e988e66685efd4348b00d28c741e96
SHA1

fef504dfeeb2713c57c1b95e7e157f6adea2dac5
SHA256

f872a80081d3d0cc45eab592abd94d3a57f71b39a1094441bfc914f1a1b7d229
SHA512

8cf5d66d09945422b23990e6b6b1a9f32afd0e43ce896f8c96ab462ffafd2d89054b5424099a0fc0b6b5178c6e697e9edf7e1276ae88e8e4cedb61149b0ede8b
SSDEEP

1536:mzLnkpg/SmGGKjF5U1MlOfIIpaDpPn0ioe95gfiP6Tt+g5E8tc4:eLkpg/SV3U16IpYlOeTtiTO2P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25e988e66685efd4348b00d28c741e96_JaffaCakes118

Files

25e988e66685efd4348b00d28c741e96_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ed75c8463ebdec9832dd1113f74946c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
SetFileTime
ExitThread
HeapUnlock
GetStartupInfoA
DeleteCriticalSection
MoveFileExA
LoadLibraryA
FlushViewOfFile
GetProcAddress

ole32

OleCreateLink
CoCreateGuid

shlwapi

PathIsRelativeW
PathGetArgsW

advapi32

QueryServiceLockStatusW
EnumDependentServicesW

Exports

Exports

CPlApplet

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ