3bf2055f45f8eb0518958908dc5ee4db_JaffaCakes118 | Triage

Sharing

General

Target

3bf2055f45f8eb0518958908dc5ee4db_JaffaCakes118
Size

22KB
MD5

3bf2055f45f8eb0518958908dc5ee4db
SHA1

1204c683c217d11e2725af2673dacc591a580a0e
SHA256

a6bce9e53ea58ff51df213c0146b1d66969e95c41fd7d03fe92942fcb71d3f6f
SHA512

b1baec505ab822b01c6bf3108f223ed80ea92ca66b39445fc2fa62ea189e2054e8e274871110bbb957285b0bf6a6f04b088b3e4573027d0bfac230e360b0efd0
SSDEEP

384:cmyORlukiJR9XZGVMELEvnZ+TQmVhUGgs:X7ukm9paMEwvITVfgs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf2055f45f8eb0518958908dc5ee4db_JaffaCakes118

Files

3bf2055f45f8eb0518958908dc5ee4db_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b9899a3107db52e4890b3b25390a5e38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
Sleep
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread
DisableThreadLibraryCalls

Exports

Exports

Export1
Export2

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ