427ce9a90d5e1516930d117b5983ef7f_JaffaCakes118 | Triage

Sharing

General

Target

427ce9a90d5e1516930d117b5983ef7f_JaffaCakes118
Size

24KB
MD5

427ce9a90d5e1516930d117b5983ef7f
SHA1

1d714c4b55836c15665c912ff6569b628ccbf722
SHA256

301b95c9011407c61511a86a88648303981321554632c6565cc62acd88e3ea37
SHA512

da46d22dd9028ca26d16732f21feeb3c4708f2ea66b0cc02b8b97b4a7f34ba21a371042df08288eb065205541607f06ece7706e9c9cad7c1f2512cc7421ec029
SSDEEP

768:vurGkhuZJE79jnmoUF0iMMAH6DkWkrliUfJRn:Wr9huZJE79jnmoUSLKDkWkYU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
427ce9a90d5e1516930d117b5983ef7f_JaffaCakes118

Files

427ce9a90d5e1516930d117b5983ef7f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a7eb46f0b8e259bd470c1d75419cbd91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceLanguagesA
FlushFileBuffers
GetDateFormatA
GetPrivateProfileStringA
GetVersionExA
MapViewOfFile
RaiseException
SetCurrentDirectoryA
Sleep
VirtualAlloc
WriteFile

msvcrt

__p__fmode
free
realloc
setlocale
strspn
wcscmp
wcscpy
wcslen

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ