2992af5b7338c2d6ab29d8c5b3f1edc2_JaffaCakes118 | Triage

Sharing

General

Target

2992af5b7338c2d6ab29d8c5b3f1edc2_JaffaCakes118
Size

93KB
MD5

2992af5b7338c2d6ab29d8c5b3f1edc2
SHA1

71a4b696df09824f1448c986a863d39433b236bf
SHA256

70345c6ee8a4d02f97c8eb32b996fa341b440af286513f0ed071e9b5110b71da
SHA512

696dd2de6f5cb5535b5c617979da64a4ab48b8487f9f1f065eeee32d3d605629863b740f6f4f298ec0d7f5d126cd6d54299b656d152f097e1792c2d7a2a5858f
SSDEEP

1536:BWviSpkVJN+mLXnwTJfKLueWCk+mA8uGpE4h/rlND7DKo/ZvSpvcZMG2Kz0z6XOK:gvROVJxcOutOmzuGVDn7p5SpvWh2gGFY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2992af5b7338c2d6ab29d8c5b3f1edc2_JaffaCakes118

Files

2992af5b7338c2d6ab29d8c5b3f1edc2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f92d037e1c5f0b382e19b2f05beb171f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetLocalTime
GetVersionExA
LocalAlloc
MapViewOfFile
OpenFile
EnumResourceNamesA

Sections

.sforce3
Size: 25KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ