300b05d28016928e118428ed27e163c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

300b05d28016928e118428ed27e163c0_JaffaCakes118
Size

18KB
MD5

300b05d28016928e118428ed27e163c0
SHA1

2926b9bd5c1581e889cd62e40e3a42b9a7f9f5e3
SHA256

d9c7367601a550022a3031c2452a5819ffa6ac2437fe193a2663694e6fc50c77
SHA512

77fd8635d6840e51951f25a2bb98b832185390c4825dd1b84a01d26f4748643a65ac363757b2531708d7f7f154249d7c1003165f8390499764e8f25e5548022d
SSDEEP

384:WN5Xcu+tn+cMNyyqoz+5wzaDDrO2GAAefjr7XujLzAVsz4pn:WN5t8r8yyDqqanru67nVt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
300b05d28016928e118428ed27e163c0_JaffaCakes118

Files

300b05d28016928e118428ed27e163c0_JaffaCakes118
.dll windows:6 windows x86 arch:x86

b53f9c4bef393c316b46600c5cedde16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceTypesA
EnumSystemCodePagesA
SetThreadExecutionState
VirtualProtect
GetNamedPipeHandleStateA

msi

ord131
ord170
ord74
ord59
ord77

crypt32

CryptMsgVerifyCountersignatureEncoded
CertAddEncodedCRLToStore

rtutils

TracePutsExA
TraceRegisterExW
TracePrintfExW

mscms

RegisterCMMA
UninstallColorProfileW
GetColorDirectoryW

Exports

Exports

Dkzsjxlz

Sections

.text
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE