443d1159ce771d5c7da5b0e6b61ba5ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

443d1159ce771d5c7da5b0e6b61ba5ec_JaffaCakes118
Size

5KB
MD5

443d1159ce771d5c7da5b0e6b61ba5ec
SHA1

a2a39f96d8c78bb7c37326641ba0823666a98735
SHA256

9ee9d5317b21beecd63216b13a8868ce660666eeb0887ca553cdaf9bf19a7d60
SHA512

013e4573acacabc3b4d3d6e9c3b2e3e350f511cabd655fbd951082aecacd0e7dffeb5da8f007517ace0d80b809ebb4994a85454e6f9b8c205510503f7659b7e6
SSDEEP

96:fka/xAyTILmmqrHLYo7ZPiCm+7cJMHz+a332/XwLj9Aeep5JvXRKC9UM:fkved7ZPiCm+4JizXmoV/epB95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
443d1159ce771d5c7da5b0e6b61ba5ec_JaffaCakes118

Files

443d1159ce771d5c7da5b0e6b61ba5ec_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6143b83d51d31f5132e38d670ff6a01a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
lstrlenA
lstrcmpA
lstrcpyA

Exports

Exports

LoadBitmapA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 375B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ