3de519ae30cdec8f3f39bd243533506a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3de519ae30cdec8f3f39bd243533506a_JaffaCakes118
Size

108KB
MD5

3de519ae30cdec8f3f39bd243533506a
SHA1

bfbc1db58b51752bd4579654e46871418ddf257a
SHA256

7afe1e85853d30df04188874c2cdc139d3cd3b187305d1ecadad6ed1cef47f8e
SHA512

ff0755e68bca3b6e559ef95c16bf3298989ae895b27ec1d3997c10977b3f69542287b313da1520086211aa8b0510e18d93c61239fb7751eb09c54696d6154bf1
SSDEEP

1536:YXvfPdPq5uzc02ZWjAjxTC8Adir0i/ePZW+TjyJLm:2w5uzc02ZWjAjxTC8AdP5nyJL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de519ae30cdec8f3f39bd243533506a_JaffaCakes118

Files

3de519ae30cdec8f3f39bd243533506a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4dce087041d803114bf5927f8ede64cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
GetFileAttributesA
GetLastError
ReadFile
Sleep
WriteFile
GetFileSizeEx

Exports

Exports

principal

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ