5f1fd9aecb8f79d0560d5faf86c1d4eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f1fd9aecb8f79d0560d5faf86c1d4eb_JaffaCakes118
Size

21KB
MD5

5f1fd9aecb8f79d0560d5faf86c1d4eb
SHA1

db0049a0c86174f6d077f04a65bbc8fd207c2a02
SHA256

ee1b0b1d4682b1438d31365b8906fa20b0dd8da3f81855b6b7449154f0ae4203
SHA512

2a00ab71411523c1dfeff9486c3342a4055ba099cc32c497e852e3bdf86fd54cc04937c2f2d8ae5afafbca3eff762618791dc7542a33931a058bf5737c2ee4be
SSDEEP

384:CXl6M8p3IoShw84owxqXCIsa4eUCtdR/JVJ+IZl55hBylqin5v:5M8p3IoSmNqyIspwTrJ+OzhBzih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f1fd9aecb8f79d0560d5faf86c1d4eb_JaffaCakes118

Files

5f1fd9aecb8f79d0560d5faf86c1d4eb_JaffaCakes118
.dll windows:5 windows x86 arch:x86

fe91c44b848e1010b9e484763fe5a148

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceLanguagesA
ExitProcess
FreeResource
GetACP
GetCommandLineA
GetFileSize
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

msvcrt

_XcptFilter
__getmainargs
__p__commode
__set_app_type
_cexit
_except_handler3
_stricmp
exit
isdigit
malloc
realloc
sscanf
strpbrk
vswprintf
wcscat
wcslen

ole32

CLSIDFromString
CoCreateInstance
CoGetMalloc
CoGetObject
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromCLSID
StringFromGUID2

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ