3a12b5507de86e6422d3b3e9cf9841d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a12b5507de86e6422d3b3e9cf9841d4_JaffaCakes118
Size

66KB
MD5

3a12b5507de86e6422d3b3e9cf9841d4
SHA1

3f8361c3d6748a32771d4f9890d6038ff8bcd7e0
SHA256

14f599b2ac15cae0e8ae4fb0b0703136b60137ad0fbe1df78440749023845c91
SHA512

de2a892775dec5e16b27f1924376e81f7323a429770869f91c2c4d24c79900206367dbd7fcaa8d6ccdfd76db0537a3f19bb20ec626414fcb641c81a642c811a9
SSDEEP

768:8EJaShGP6fqINnJ/nTFVd6o+q6tB+1Gm3oeYq/PzkOsk/9FZJJcdJ/BnnXppGx8Z:3a0i6cq621B3rRLVFl6SlZ0imp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a12b5507de86e6422d3b3e9cf9841d4_JaffaCakes118

Files

3a12b5507de86e6422d3b3e9cf9841d4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6f069b236a222984adcfa511bd42a5dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
EnumResourceLanguagesA
ExitProcess
ExitThread
GetStartupInfoA
GetTimeFormatA
LoadResource
MapViewOfFile
TlsGetValue
VirtualAlloc
lstrcmpA

msvcrt

wcscpy

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ