3c19facfd3b6ae2027ff136f5c2dfd3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c19facfd3b6ae2027ff136f5c2dfd3b_JaffaCakes118
Size

60KB
MD5

3c19facfd3b6ae2027ff136f5c2dfd3b
SHA1

d46d259b5a964ea0d77a809ed174f3daf7aef3cb
SHA256

a40cd4e98296cc3f6e7484df8e6456abb8a96ade3f25e1bb3f14d6c8cee23fd3
SHA512

0f3858c24b99dd6f1fc758b622590d3f0b728efe2d38e1b3088a32ccc558a4e812b6d740cdad27d461f5865fef16aed5b9f8764d8834efbbadae0171534591b2
SSDEEP

1536:reEICww1ksp3Vhuadi5tlPbfJnkbPSve:KLw1PGTdzJnk5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c19facfd3b6ae2027ff136f5c2dfd3b_JaffaCakes118

Files

3c19facfd3b6ae2027ff136f5c2dfd3b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b1df67b20852ca66be5e27adecc5e7e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
ExpandEnvironmentStringsW
Sleep
OutputDebugStringA
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileTime
GetFileSize
HeapAlloc
GetProcessHeap
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStringsW

Exports

Exports

faft

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ