46f268293f42c256616c1d30e4c104a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46f268293f42c256616c1d30e4c104a0_JaffaCakes118
Size

134KB
MD5

46f268293f42c256616c1d30e4c104a0
SHA1

0b0150ec67eb909e8cd7f127fb98c4d12919f53a
SHA256

f0aac0e6b0cd0231f253869d8f93addb4bfcd73baf479b6bc402487c6c687839
SHA512

659b1f9351a5703408c37b610bf01648c7d304a175b25621b1c174a7cf47536396870484bce842ff1f748f9ab97f9ef81f964c1baf6ff2a185e0124ec95ed1c0
SSDEEP

3072:LZ9CU1AvvL9rd+72cqrNBA8f9m+Lm87xjlLOknbG0/7x2m6BgBLT9:JevL/Q2cqrNBAixLm8NlLO+/x2Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46f268293f42c256616c1d30e4c104a0_JaffaCakes118

Files

46f268293f42c256616c1d30e4c104a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b20b827a31ec74f4c7099512a4b84f3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
ExitThread
VirtualAllocEx
CancelIo
DeviceIoControl
GetTimeFormatA
SetConsoleCP

dhcpsapi

DhcpDeleteServer
DhcpAddServer

dplayx

DirectPlayCreate

d3d9

Direct3DCreate9

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ