4c15146c5be8ccf3afc332985bc10731_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c15146c5be8ccf3afc332985bc10731_JaffaCakes118
Size

42KB
MD5

4c15146c5be8ccf3afc332985bc10731
SHA1

c41a2ea08096e3adaf0ceb3af8f84c22c8c7a6ab
SHA256

482e34a30548de77b2ea51e13a6b64c5d8175b56c9b74df30e3b75773c13f6f2
SHA512

82bf7181177cba1728cccf79e0f62d192c37afe68f8d8005c474396e149e0019902fb38b133c386801f4f7c04f7e342e0624df7661ab8ad89d83996d4d13af75
SSDEEP

768:mTRd8kVFPp/IiVyKXdT1WGIx+1NCB6vB2GiBs3l:W8kVFp/xVyKN1WN+1LBJP3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c15146c5be8ccf3afc332985bc10731_JaffaCakes118

Files

4c15146c5be8ccf3afc332985bc10731_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6f07ea296e3740277307fda1cca921e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
FormatMessageA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ