5f7b31de950fc222bb20bfdf00b352a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f7b31de950fc222bb20bfdf00b352a6_JaffaCakes118
Size

92KB
MD5

5f7b31de950fc222bb20bfdf00b352a6
SHA1

a0fbdd3813576ebb9198fc2aa6e6846d9e399f4e
SHA256

73d6dfbc11cb160ca0e230abaa28cbe86b20dfb4e992a40abdcef7fc879e9506
SHA512

f7b35cc059e22a8d1228a044ef7c60a164122e4e576b2a5b2579bd24e1579628d362706917e60215da5c0c0f820c2ca3a478cebcb449e9eb15791653092441bd
SSDEEP

1536:6Itbt3deL62FiQFCEbWg+tT1NfZWFWpZiq2eza1/YhJ16ZYOh1U9k8ka:Pbt30e2F/oEbf+tT1NIFqiteG1eJslCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f7b31de950fc222bb20bfdf00b352a6_JaffaCakes118

Files

5f7b31de950fc222bb20bfdf00b352a6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

21acd2bb11777b98905751f09cc07497

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCommandLineA
GetLocalTime
GetModuleHandleA
GetTimeFormatA
ReadFile
VirtualAlloc
lstrcpyA
lstrlenA

Sections

.sforce3
Size: 24KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ