438af35691ed45c61a3e251bf35439fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

438af35691ed45c61a3e251bf35439fc_JaffaCakes118
Size

64KB
MD5

438af35691ed45c61a3e251bf35439fc
SHA1

44887e28736923a57f0b433ebac0e34c1001e81b
SHA256

5cedad7808bc266dfb872e360cad3f3aeb651b6765cd3c01432d32322d86f20a
SHA512

27a2c9cbc6d248ee52d06429d79a3053d790a79b9e1c31dbb33bf0fa47c1b5ac4b51acc9b871139ae20e30043d0c8d52fffb4780c01428c366234ffe4de59ea1
SSDEEP

768:Ddx+7jh9AeTDK58AdDV4f6mAxmwAj5N7o9PJAQY46CqfpXOSXHEruCOm8Tn:hY/hOeT28MeLAkDaPHf8Tn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
438af35691ed45c61a3e251bf35439fc_JaffaCakes118

Files

438af35691ed45c61a3e251bf35439fc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d82b58812578ede82faa9ae1439ec492

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
DisableThreadLibraryCalls
Sleep
GetProcessHeap
VirtualProtect

msvcrt

memcpy
_except_handler3
malloc
_adjust_fdiv
_initterm
free

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ