337bfc77588c8c8af035b4ef863df288_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

337bfc77588c8c8af035b4ef863df288_JaffaCakes118
Size

48KB
MD5

337bfc77588c8c8af035b4ef863df288
SHA1

151e92c9a1de440df9def276d533d7cb2668bdc7
SHA256

6b33f7a8d17e57292c685caa98e599e34096b412c28a3ee3bd25e302ad7ee2fe
SHA512

a22fa1a734063a721797ea3bc5e039bbc66ddd81dbb0ec24151ea39dd8471f0a681f290ba901fcd83beac3405b528dd0629d80f78a8f21122506de93a2babab4
SSDEEP

768:6MjPKsjwgHQViPkl/6Eh0dJa3IuGajMZzqb27lbc2GHQBw3Z:6M+s0Ki1KdJa9Idv7i2Lw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337bfc77588c8c8af035b4ef863df288_JaffaCakes118

Files

337bfc77588c8c8af035b4ef863df288_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b4754aa8e3ae66da8d907920a41df42c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

strcpy
_wcsnicmp
strcmp
RtlImageDirectoryEntryToData
RtlImageNtHeader
_strlwr
memcpy
strstr
sprintf
strncpy
memset
strcat
strlen
_strnicmp
wcsstr
_wcslwr
_chkstk

kernel32

LoadLibraryA
GetVersionExA
OutputDebugStringA
HeapFree
HeapReAlloc
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
ExitThread
VirtualProtect
GetModuleHandleA
GetCommandLineA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ