39b5cb23d50218ee452c28ceac1b88c4_JaffaCakes118 | Triage

Sharing

General

Target

39b5cb23d50218ee452c28ceac1b88c4_JaffaCakes118
Size

66KB
MD5

39b5cb23d50218ee452c28ceac1b88c4
SHA1

8bef53497a6118a047136cc5df0d3a7051cada05
SHA256

6207de188614d4ca155346e279ef826df4febbd12bb8431e531fc7de20dd835a
SHA512

dbf05d96438a57c69d7b3df9bd40564b8dad486e12af0af6ca8d3549aa4086b6fd8221fe34b5c375ba18c3fcc4f4d307a4ea122138e32234472aa6d829ef68c8
SSDEEP

1536:SptZCKBv5myZGA68A0pq7rvME4Gul6sdEtXbc:ZKBh9NRyoGuBObc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39b5cb23d50218ee452c28ceac1b88c4_JaffaCakes118

Files

39b5cb23d50218ee452c28ceac1b88c4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

92914fded8a4ba0e7ee6cd99bd64e624

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
ExitThread
FlushFileBuffers
GetSystemTimeAsFileTime
GetVersion
OpenFileMappingA
RaiseException
ReadFile
SetEndOfFile
TlsSetValue
lstrcatA

msvcrt

wcslen
wcscpy

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ