3ddf1270ec57280a6b46effb5f6d0e3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ddf1270ec57280a6b46effb5f6d0e3c_JaffaCakes118
Size

61KB
MD5

3ddf1270ec57280a6b46effb5f6d0e3c
SHA1

e0d1c2aeb16cf1e267dc9ed1b54d8da7b8939fe6
SHA256

d973d77b4f8e9fb17300536a15357612cb9687c66b3977c46f4a79d055f38a74
SHA512

71cd6e513bc2a1a553e58832c9b0657a10db7a20577e5c34eca1d0b75ea7c9be03240a15bb73d05d4a4fffc74d6cc39eb0a50e81b6fc45728724ae365d36e43a
SSDEEP

768:Gb982XlFA6vAFy4IB9EdflIinULN/rOg/yZ0WAqKhYfAGDO20HADL1ZAFL8j:GbOY26vR4cmdfxUJzyZyqKyfLVDL1ZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ddf1270ec57280a6b46effb5f6d0e3c_JaffaCakes118

Files

3ddf1270ec57280a6b46effb5f6d0e3c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d8446159734e9aab5a2c04977af2cf1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ald.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
FormatMessageA
QueryPerformanceFrequency
Beep

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ