4a1b64f5be672894de4dbeb563688d9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a1b64f5be672894de4dbeb563688d9b_JaffaCakes118
Size

66KB
MD5

4a1b64f5be672894de4dbeb563688d9b
SHA1

b710f1bf8d164a70cb60537235aefb44c124091b
SHA256

44535da3f3742121d93866411458cf57e1af2eb2a170232769e9f31b7d1c771a
SHA512

d5410021c37f2f48540623434daca02d980116e568be857f09c8108e74a0218a84bff569243085954fd484b286eed9ce5c9fec396fe4560853a4a52eaff19f39
SSDEEP

1536:oCzBlfQOfpTA9rG9+xRdNeSh0Uuo9oj7hH+lW4SvRvBMp:osTUJG9+xRdQS3uqojlHRxBy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a1b64f5be672894de4dbeb563688d9b_JaffaCakes118

Files

4a1b64f5be672894de4dbeb563688d9b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e04ea6f7969c008e6a5e9291cfd7717a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitThread
WriteFile
ExitProcess

msvcrt

__p__commode
__p__fmode
fprintf
fwprintf
strpbrk
strspn
wcscat
wcscmp
wcslen

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ