4ceccf9e534e21d06c3b6c152e00be1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ceccf9e534e21d06c3b6c152e00be1c_JaffaCakes118
Size

4KB
MD5

4ceccf9e534e21d06c3b6c152e00be1c
SHA1

c8ff30378943264413ed0c938cce92712e49308d
SHA256

12ad93f009166638b16bd975836a6d59e4f6b96998b27d465b8e53b2fcc59bea
SHA512

20d4e003e00c5f3fc53e9e8ae7681c5e7c010262149dc1794e6b8d24774e6f0e0a51e2e4c066636aa7f2c959e4e04c6fb0bccb65083381ce7ce373ffdd6c09cd
SSDEEP

96:uaW+vdUZ++81pPZTlFtfId2ruviH1dNqmR8:ua9v6Z++81Bc2ruGNq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ceccf9e534e21d06c3b6c152e00be1c_JaffaCakes118

Files

4ceccf9e534e21d06c3b6c152e00be1c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

d76669060a23e0829a5b573de6e94ec8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Developement\TwProject\Tools\bin\plugin.pdb

Imports

kernel32

FindFirstFileA
FindNextFileA
LoadLibraryA
GetProcAddress
CreateNamedPipeA
ConnectNamedPipe
CreateThread
PeekNamedPipe
Sleep
ReadFile
WriteFile
CloseHandle
DisconnectNamedPipe
ExitThread
CreateProcessA
CreatePipe
DuplicateHandle
GetCurrentProcess
GetCurrentThread
QueueUserAPC
GetWindowsDirectoryA
GetVolumeInformationA
CreateDirectoryA
FindClose

user32

wsprintfA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 971B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ