3d6a6754a6210cae9d826c0bc4609fef_JaffaCakes118 | Triage

Sharing

General

Target

3d6a6754a6210cae9d826c0bc4609fef_JaffaCakes118
Size

7KB
MD5

3d6a6754a6210cae9d826c0bc4609fef
SHA1

889bc9a787d93924584aec5587ae9c06ed9af323
SHA256

e3c9aa0f5b4f393db6895b14ac009c6a9615bfeaae0692eb0bb34b562c3c22ae
SHA512

8b9776505736eb1ba78f2f72d39940d5b0d9a4b7e9273fdf45ec3903aa7308c8825a7cc243d43b7f07eb6f4774fd357c3d45795839d24af3d4677222d987c64b
SSDEEP

96:Z1o0j1XCIoOZWH7xUmGYFQ1/rzlDTcH8OsC6BKBtgEOBLblrCxIHRyAKA:E0j1ZZczFQtrzJJKBu/lrCxIHRyC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d6a6754a6210cae9d826c0bc4609fef_JaffaCakes118

Files

3d6a6754a6210cae9d826c0bc4609fef_JaffaCakes118
.dll windows:1 windows x86 arch:x86

56c8eeb81201b9c6f231862254be7cf7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AddAccessAllowedAce
CreatePrivateObjectSecurity

user32

CreateWindowExA
CreateWindowStationA
SetUserObjectSecurity

kernel32

CreateThread
GetModuleFileNameA
GetModuleHandleA
Sleep
WinExec
lstrcmpiA

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE