3515199e73a9b3b7c8d69a574f488aa9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3515199e73a9b3b7c8d69a574f488aa9_JaffaCakes118
Size

11KB
MD5

3515199e73a9b3b7c8d69a574f488aa9
SHA1

51586652e9b339aecc64247dbc5493571d8b8720
SHA256

cedc44b44a59a23982c7fe9899b2638011b01823fdb120d9710d6ddcf1c79a9c
SHA512

75c5f34b266329311170e2b8b87ff4440ec798fbbfe3bd9cdf480af6eed06212a5c459c718651f8cbd540e4c31f6ac07d17d1677cd72c190f070127a18b9a004
SSDEEP

192:84Fj7bfDFTMDw+MsYRJsPccT+KcxtERzg3yeKmjeRuNCzqJ1:8SjnfDdIwNg0+aARs3yePeRuNC2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3515199e73a9b3b7c8d69a574f488aa9_JaffaCakes118

Files

3515199e73a9b3b7c8d69a574f488aa9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cf54d407461b61eefe63051455e2aa62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateThread
GetTickCount
LoadLibraryA
Sleep
VirtualAlloc
WaitForSingleObject

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 293B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ