2c63b21ba4bb08cefeb4fed1313832b5_JaffaCakes118 | Triage

Sharing

General

Target

2c63b21ba4bb08cefeb4fed1313832b5_JaffaCakes118
Size

4KB
MD5

2c63b21ba4bb08cefeb4fed1313832b5
SHA1

bf1134fce68f539348b6ba76b3d93767025d6682
SHA256

11db4e1bd1226d8a855e69ff67ed813cd89bff3d0b3bf37eccf329775a0f3ad8
SHA512

09f2f6c50e0dfdc727902f6561952cac0d91360cee16b2b62f8f55d2ce1b9ba348430a21761e17218ae2d2973b9e192c5fec7928c3af886e53abdcdd6f36b2fb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c63b21ba4bb08cefeb4fed1313832b5_JaffaCakes118

Files

2c63b21ba4bb08cefeb4fed1313832b5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ca9a09a656fffef5902cc38ba0cda0b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA
GlobalAlloc
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
SetEvent
FindClose
CloseHandle
GetCurrentProcessId
GetSystemDirectoryA

user32

GetDesktopWindow
wsprintfA

Exports

Exports

GetVerID

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ