426745e507e8fdac14984e9cc42eb9b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

426745e507e8fdac14984e9cc42eb9b2_JaffaCakes118
Size

35KB
MD5

426745e507e8fdac14984e9cc42eb9b2
SHA1

af11687054fbfc30eca2705efae8f7fbcfe3924c
SHA256

11d32aba1da971ce8bd18d16726119afc3a64d41d809e2d9ee66febc0bddaa47
SHA512

9fe80013bc6abaf3c77e135782704824c9c186c70d96abe723e4587d5fc65866941a7c915a0efab6eaa1f5432569dd50df82eef75d3dc4d918f5b52adf94556f
SSDEEP

768:pIejoZam1bShGIzoOEvkuLLt4Sd5L8wJ44rOg0:pIec4m5IVEvTLZ4OAwa4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
426745e507e8fdac14984e9cc42eb9b2_JaffaCakes118

Files

426745e507e8fdac14984e9cc42eb9b2_JaffaCakes118
.dll windows:5 windows x86 arch:x86

c71bccc5d80182f6600f488537f3edc2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceLanguagesW
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetDateFormatA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetVersion
HeapAlloc
LeaveCriticalSection
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcpyA

msvcrt

__getmainargs
__p__commode
__set_app_type
_except_handler3
_exit
exit
isdigit
sscanf

ole32

CoGetMalloc
CoInitialize
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ