2f930cf6f857cf459c454fbeb4abce98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f930cf6f857cf459c454fbeb4abce98_JaffaCakes118
Size

10KB
MD5

2f930cf6f857cf459c454fbeb4abce98
SHA1

e0208daf70506e03ae03b51cd358fd643461804c
SHA256

e87880d5451694b3ff8ff4a50aa8f39e0f9beaba2ef5890d46c4407f7341dc1d
SHA512

1320d6a6d45a7b6aaf2ef717ff81cc50f2997e45d654a79a09a4e7a6e5d0d74747143cc67aaf5975473bd832c4b49ff50478e8ebb79014b6ab5ef8da78819f6c
SSDEEP

192:WakAkG0vLWPW9e4dBAJ0vh41O0SoiwsJ:WdDKPWk0J4IN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f930cf6f857cf459c454fbeb4abce98_JaffaCakes118

Files

2f930cf6f857cf459c454fbeb4abce98_JaffaCakes118
.dll windows:6 windows x86 arch:x86

b53f9c4bef393c316b46600c5cedde16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceTypesA
EnumSystemCodePagesA
SetThreadExecutionState
VirtualProtect
GetNamedPipeHandleStateA

msi

ord131
ord170
ord74
ord59
ord77

crypt32

CryptMsgVerifyCountersignatureEncoded
CertAddEncodedCRLToStore

rtutils

TracePutsExA
TraceRegisterExW
TracePrintfExW

mscms

RegisterCMMA
UninstallColorProfileW
GetColorDirectoryW

Exports

Exports

Dkzsjxlz

Sections

.text
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE