47807b23779807efcc0bb5c5e3df4f28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47807b23779807efcc0bb5c5e3df4f28_JaffaCakes118
Size

97KB
MD5

47807b23779807efcc0bb5c5e3df4f28
SHA1

a1b3f0066fa347eeca90d63bac4095b5e47e17bd
SHA256

b78da42682f808c060b083a2f6dedac0528db07d9e2c14aa6d636d01dbaf540c
SHA512

003d9fd0aeab2f28b907691d3a30d692de144b25f9c5fd961c9c13b4103ac713c41cf6a74b51c33e94efe2ecc5698c24f533d5300eadfdd239ee94c5a5780cf3
SSDEEP

1536:JQmQ3JXe/xPtQ4BzjlDUMd9nanBKB6YD6TEtBctTU+gYx5BeVYn:JQmOJ2tQ4rUai+/mEBcBrgYx5BeVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47807b23779807efcc0bb5c5e3df4f28_JaffaCakes118

Files

47807b23779807efcc0bb5c5e3df4f28_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 160KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ