48e4b8aaa37c02672cf8ee74d8730056_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e4b8aaa37c02672cf8ee74d8730056_JaffaCakes118
Size

98KB
MD5

48e4b8aaa37c02672cf8ee74d8730056
SHA1

bba01d032be43d75ed8c859e013963c234bbc40c
SHA256

6cb5b69858efb19cbaac13cd1aa8b3e23ead213fb028acd92c039aa05387f2c7
SHA512

b3f4bd4a0b3bcd13852336a915d07f9a65c9bcbada710d518cf00dc6a9eda08fc1081a1eae7cc169adf58c3f0e034583750dd51ec333edac285068d041422d16
SSDEEP

1536:tefJYIt8zg4DpGCZ7Ng3fUiucorrX6it3JAKgyQ/ucvFlBhHTvjfHwpu1DE:tO+q94/7Ng3fbyfX6itSKgyQ/t5vjry

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e4b8aaa37c02672cf8ee74d8730056_JaffaCakes118

Files

48e4b8aaa37c02672cf8ee74d8730056_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a09feb167d1fc5c41cbe7f9f9dcea416

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeResource
GetDateFormatA
GetSystemTime
GetSystemTimeAsFileTime
LoadResource
ExitThread
RtlUnwind
WriteFile
lstrcatA
lstrcmpiA
ReadFile
ExitProcess

advapi32

RegOpenKeyExA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ