5dcc3bdf41b5a7a17f49908579bc190a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dcc3bdf41b5a7a17f49908579bc190a_JaffaCakes118
Size

20KB
MD5

5dcc3bdf41b5a7a17f49908579bc190a
SHA1

a40c8bd4928e07b084ace3adf9bc95459ba25a66
SHA256

adb9cb34a11debaaec2c820ea27ee4403012a6dcc121cae244d1cc2544e1e743
SHA512

7f1182f979462bd5a9c5f1c92f1b5d4818613d551246c86faa06b16374b4c82a0fe7616489f5d6df32efe851ae54037565dd1d574e8a007764b74c5a03ca184e
SSDEEP

384:gU010HTuW8sTUXIZsyVTj1YJBY30HbBgF3hAOf2UNr963:9buW8sTUXINgY307y3hAOfxA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dcc3bdf41b5a7a17f49908579bc190a_JaffaCakes118

Files

5dcc3bdf41b5a7a17f49908579bc190a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

762c0260e928c0dde0b4675e5ce8cc8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
LoadLibraryA
Sleep
lstrcatA

Exports

Exports

DllMain
bdsvwad
nnlvk
tsgrpb
yhnxc

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 720B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ