337471b95a50fae7f4ef1faf019d0e31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

337471b95a50fae7f4ef1faf019d0e31_JaffaCakes118
Size

12KB
MD5

337471b95a50fae7f4ef1faf019d0e31
SHA1

9b7c3c86880e0499a130e5b79a11acf604ea360c
SHA256

791e3ad92376cda611765cf4832d9a93156b7c048122eabcd28045c8a1a7eb6b
SHA512

9aa645c53ddc1fe2d09d8e7869e13c90f9288af17611c4dc3c9515722091a6104989d4641b7239df5bfd6506d72f738745ee9f5eabe1f55592efdfca60608423
SSDEEP

192:NDDhmm2zXvT6RfXuJSiFXvB42pYcf487nsK:ve6RfVE/uMfl7nv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337471b95a50fae7f4ef1faf019d0e31_JaffaCakes118

Files

337471b95a50fae7f4ef1faf019d0e31_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d9897786bb81b8660a6c9c9bfa5a0132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
Sleep
CloseHandle
CopyFileA
CreateFileA
CreateThread
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
MoveFileA
ReadFile
VirtualAlloc
WriteFile
lstrcmpA
lstrcpyA
lstrlenA

Exports

Exports

zlib_bz2

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ