4cac08e5bd8d9413d074c80b8495f8d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cac08e5bd8d9413d074c80b8495f8d0_JaffaCakes118
Size

15KB
MD5

4cac08e5bd8d9413d074c80b8495f8d0
SHA1

054c331f905e07ffbbf57f5135bf58bc1ed68a2d
SHA256

8daadbd7e303176a7f0aa2d131de64301036ef82f70ad60f5d32f5def6c20fe8
SHA512

10d9091ffd8fedcc87f8c1a6b85fc6c58a0f21383718d225937b0dd71a2373ee7687538f14ae5dc194ba3296054029073b06e3b033cd723ee2a4c94ea91fb98a
SSDEEP

384:baeHEXBFv8+XUZWJig3srLpp8QLpRq4ixiyoG:bFkLv8+E1fVRqpi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cac08e5bd8d9413d074c80b8495f8d0_JaffaCakes118

Files

4cac08e5bd8d9413d074c80b8495f8d0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

05f74346c5bd2d43502fb7b32cecd993

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId

Sections

.text
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 96B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ