447742845141256bfa38d5bb92c5359f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

447742845141256bfa38d5bb92c5359f_JaffaCakes118
Size

11KB
MD5

447742845141256bfa38d5bb92c5359f
SHA1

b049d6e8a40f440ccde34f7fc041f2236e7fe7a8
SHA256

bd2c3aaed0c87f63a1103a5454ede4a67bbbb730f5c1585ae43f55c19bb21d92
SHA512

6d6f92e2981c65e091e94e43ef405c8a5b44e670bf557e77cf4426710aa7eff4ea94e7bc88d4fa57fe13c077884f41dd79bf53c82d6ea011d952dcdc34877a7e
SSDEEP

96:WVDyhKbSfbeK900fr9s/h3zxcqpbHxHqnvplLwVnOWZwyFSTPS23dqgDbmswH3jB:GQDeEhf4SlUO9TZ3FuZl+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
447742845141256bfa38d5bb92c5359f_JaffaCakes118

Files

447742845141256bfa38d5bb92c5359f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cf54d407461b61eefe63051455e2aa62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateThread
GetTickCount
LoadLibraryA
Sleep
VirtualAlloc
WaitForSingleObject

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 293B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ