38896434586faf9c1acad7ab1d9f82d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38896434586faf9c1acad7ab1d9f82d0_JaffaCakes118
Size

6KB
MD5

38896434586faf9c1acad7ab1d9f82d0
SHA1

ebe32eebbbd937e2bac2075d7bf6049e3ce7e8d9
SHA256

b2e20e2be9f0ab15f1197d58b7e0742c8e6d318955af3a0da091f8adde73f9a7
SHA512

cd786333f5a6ea8e97c8515c6638aa221eb91703009665b5f58feb8060f140c73e15cf90fcbb703bad413cba1a6142d0f45546013f3bdae7617874e3b80894eb
SSDEEP

96:cCbzAOvBbP1p6+1qcSSA+pAwscq+phX41VAppU/jMT:6OvBj1qcSSjw/1VbMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38896434586faf9c1acad7ab1d9f82d0_JaffaCakes118

Files

38896434586faf9c1acad7ab1d9f82d0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bab2f88105f1aa3a1736a47b6649426b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free

kernel32

ExitThread
VirtualFree
VirtualAlloc
RtlUnwind
ExitProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetTickCount

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

iphlpapi

GetAdaptersAddresses
GetBestInterface

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ