5a26beb6fcc43d08ba5a3a9a0feda979_JaffaCakes118 | Triage

Sharing

General

Target

5a26beb6fcc43d08ba5a3a9a0feda979_JaffaCakes118
Size

27KB
MD5

5a26beb6fcc43d08ba5a3a9a0feda979
SHA1

5113f42a4fa5348940fce5d0d17e76ffa549f6dd
SHA256

4e21de26fad196eb4ed06d4ef04e47132eb38592298264328ad908f0310c42a7
SHA512

0614e999ee6dc08e4b4e34a9498d00313aba4e5c66296ba289c1a3a74ec687954190bf8150ffb2e8974c9c12d268c03759354662a40bd973f31cb739b98da437
SSDEEP

768:QYshyixO6e9Pq3sZdgOykdd1WSUX6gqZeguZ+z2NSLoAv:VnBFq3sG+DWSUXcXjzEyoK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a26beb6fcc43d08ba5a3a9a0feda979_JaffaCakes118

Files

5a26beb6fcc43d08ba5a3a9a0feda979_JaffaCakes118
.dll windows:1 windows x86 arch:x86

257b01b4207745a5640085f94ef5e3c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

comctl32

InitCommonControlsEx

kernel32

CloseHandle
CreateFileW
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
GetCommandLineW
GetFileAttributesW
GetFileSize
GetFileType
GetLastError
GetVersionExA
GetVolumeInformationW
GlobalAlloc
GlobalFree
MultiByteToWideChar
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear

wsock32

closesocket
WSACleanup

Exports

Exports

EST094

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ