38dce634cbb8e93eeaebc7d1d168f297_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38dce634cbb8e93eeaebc7d1d168f297_JaffaCakes118
Size

6KB
MD5

38dce634cbb8e93eeaebc7d1d168f297
SHA1

c4bf7432b3359bc1fad1c925cb7804224e7a610d
SHA256

e2d541e763aa144a6c1f2a7e42b5a11e29789905aa0a2ef49877e96fd7b65318
SHA512

a0d3970ba90376991e86afa68091f3b78ba3443aa6b06be49612950640e1b1393ee1713e3bfdff2c031fb96bbc65844aae3eb063be22e47c8c8555fc6e01902d
SSDEEP

48:iEda/AgFSGo/h6SMACNFEIcecHnLdbJi9xGSB8uID5V82mJi2fw5itx5tdKHIGQW:xCah6nRE8crNslyD5+zJiL5Upq5a93O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38dce634cbb8e93eeaebc7d1d168f297_JaffaCakes118

Files

38dce634cbb8e93eeaebc7d1d168f297_JaffaCakes118
.dll windows:4 windows x86 arch:x86

64fe086626083923e5e43976c9166563

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
FreeLibrary
GetProcAddress
lstrcpyA
SystemTimeToFileTime
GetLocalTime
FileTimeToSystemTime
GlobalAlloc
lstrcatA
lstrlenA
CompareFileTime

Exports

Exports

A8KL2aomtR
DebhrL3HJPfWZRuRp
EfMGsxNIvsTSp1
HkB5fxg52y
MSmV9OF8aNw
OKwnROEyPNKKh
RDGezTUlITsdLsp
UTsV0rNK0YWG
bhrL3HJPfWZRuRp
eM6fjuv
fF7TgdwpdRZ8W5
fgu9EYnr0YIBUS
fhXfJec3
hyQvtMIrnPEUx
jzFZ6d8ME
x6yv3rSllKMa

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 821B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ