3dc8ff6c9f6c5dbbe134b109d667f376_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dc8ff6c9f6c5dbbe134b109d667f376_JaffaCakes118
Size

36KB
MD5

3dc8ff6c9f6c5dbbe134b109d667f376
SHA1

37f5221dd7c4c789a85989ad39360f902648a3c5
SHA256

0fa86758292679e983344cf116380f2c86620496b9286909b13416a9f0b64232
SHA512

fee5441e55e16103250625d5ee5c52de93c4d52bf232590257d7f0bbd625666f1b03f1a7f670e82d6ccb5ae1952f873fe4be1c0eb721bcab5b362feca9d04983
SSDEEP

768:bdSU8NgyVnft4WsXv+GhEKwtwZfAbjbGdxnSSefW+R6Fy0P:oVnKWSWmwtwZi80E1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dc8ff6c9f6c5dbbe134b109d667f376_JaffaCakes118

Files

3dc8ff6c9f6c5dbbe134b109d667f376_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d2e4b629a9ed62398eda6720e5165584

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

hal

KeAcquireSpinLock
KfLowerIrql
HalMakeBeep
HalProcessorIdle

ntoskrnl.exe

IoCreateDevice
IoFreeIrp
KeUpdateRunTime

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE