493cdef419c1660375be2c27e21b8786_JaffaCakes118 | Triage

Sharing

General

Target

493cdef419c1660375be2c27e21b8786_JaffaCakes118
Size

92KB
MD5

493cdef419c1660375be2c27e21b8786
SHA1

3fdee5bb627dde03dede5208d33f038cfbe74156
SHA256

da648f42dcc9927838975b1749fca95cae2b9b0e6e76439f561a280841fa24ad
SHA512

ae30963424ff520b92728a96c69fb3546bd5c5a7953e69bdc99c3338b9ab404c31756d542943bd156666f28e3fd1d8fcdcad6bb6e0dae3f8f4d322bf84e02791
SSDEEP

1536:dZD2iw1NHy4e6Mn1etaM5AYq+2Ts9QrdoHn+Y1EwH:dcnA4e6M1kAlw9QrOe8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
493cdef419c1660375be2c27e21b8786_JaffaCakes118

Files

493cdef419c1660375be2c27e21b8786_JaffaCakes118
.dll windows:4 windows x86 arch:x86

eafdbc057521b2d47a6c77d39f498c71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCPInfo
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
GetCommandLineA
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ