4adbefc08ccbb2a481629bf9ab5b2c04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4adbefc08ccbb2a481629bf9ab5b2c04_JaffaCakes118
Size

76KB
MD5

4adbefc08ccbb2a481629bf9ab5b2c04
SHA1

64fa3907b930bd7b203dc1cb41a743d3be3c2f7a
SHA256

57d43b657ad6ea62c968b1ba44bb1266f7d351db363a3f835356ede7c247bfd0
SHA512

6f8e74cd8b7c2be4c24082d55689dc8d0b07942215aeecdfac0c693e2fd427330c0efb857a36417f9e792c6aaf25f8049aa427092f4e85b665cbaf7e5bb27611
SSDEEP

1536:QbM8c6vykImCS/i9FOQCZgeQdaLvSjaXsHX:V26sK9FOTgeLLv9OX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4adbefc08ccbb2a481629bf9ab5b2c04_JaffaCakes118

Files

4adbefc08ccbb2a481629bf9ab5b2c04_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3aa63ed5b39a521c01dd2724a79f5fc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
HeapAlloc
GetProcessHeap
HeapFree
CreateTapePartition
SetEndOfFile
CreateFileA

Exports

Exports

amtw

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 499B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ