357cd4a3acea527dcad855fb4585fae9_JaffaCakes118 | Triage

Sharing

General

Target

357cd4a3acea527dcad855fb4585fae9_JaffaCakes118
Size

11KB
MD5

357cd4a3acea527dcad855fb4585fae9
SHA1

f2ac827f555447f35f546c340cb8ad092f36b761
SHA256

245a8d7e7d31bc7b89e3e217d6c3cf28c766e771596aa3dbe9ae009c3d360db7
SHA512

4a805f7e859ee9d33bdeddf8c7679bc78d455b88fe272a616cd7fca91132e5058a8d353d2c5e3d02505ed143ca7da9b174a09d1e044054b451dff37ac64fd881
SSDEEP

192:05ESjc2rtQzWMHz+h33XHH33333OWrj/KhSozUNrSo8EpxrGx+Wqh1yH33333bH4:0fjRrtQ6a+R3Xn3X3OWrrIJotL8E3r6Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
357cd4a3acea527dcad855fb4585fae9_JaffaCakes118

Files

357cd4a3acea527dcad855fb4585fae9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

123a4199790f67f6d12e16db71236286

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CloseHandle
ExitProcess
GetLastError
GetModuleHandleA
GlobalFree
ResetEvent
SetEvent
Sleep

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ