4a84ee9104e8540024c0138bbafbc82b_JaffaCakes118 | Triage

Sharing

General

Target

4a84ee9104e8540024c0138bbafbc82b_JaffaCakes118
Size

70KB
MD5

4a84ee9104e8540024c0138bbafbc82b
SHA1

35fdccb7cd5486a1dfa50cfffd7c4cab7c9ba742
SHA256

f72c66861f4e638b7dd5c5b5f8990519fc43871f1e6c1ecaf7e3aec2ff5c094b
SHA512

cc3c8d26193695b7b938860828ec58e98b037ae10468bdca1959ea27737456cb64fd6dcb220e80c05e24546234d34a5e4853d757cd56efd0297befe8999dc21f
SSDEEP

1536:wI2kymVOAUGcZnq2duYCuUDXzZvabPCiMlNlqLe7I3iwF23qOxjUJy:wI0mVOAUGz2QfJDXNhleY+O6Jy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a84ee9104e8540024c0138bbafbc82b_JaffaCakes118

Files

4a84ee9104e8540024c0138bbafbc82b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 41KB - Virtual size: 116KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ