6001149dab5a078c0542b264d542e3aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6001149dab5a078c0542b264d542e3aa_JaffaCakes118
Size

34KB
MD5

6001149dab5a078c0542b264d542e3aa
SHA1

aa87635a54c1025794581952bdc1c60531663ab7
SHA256

9171584f732591259de680cc6d870514826b45b7d8be0fe4e95a292a807b2a46
SHA512

1486eda8ead79dc6a064ef01611181ec3bba93cff105414d60e54dd78ece0a3127d0c79507007450e50e5939ac9cbe1fd46a3f9a751b1f653285f8481d91ea8c
SSDEEP

768:Uczympc7Mv9HC8ewlDNbyZ1k/HyqayzN7UIpJKZa:Vempc7MFHBeo5+Z13qastHpkZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6001149dab5a078c0542b264d542e3aa_JaffaCakes118

Files

6001149dab5a078c0542b264d542e3aa_JaffaCakes118
.dll windows:5 windows x86 arch:x86

6cffdb8e7ad8c4be09ae2d0b1ee32146

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceLanguagesA
ExitProcess
FlushFileBuffers
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetVersion
HeapAlloc
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcpyA

msvcrt

__p__commode
__set_app_type
_cexit
exit
free
isdigit
__getmainargs

ole32

CLSIDFromString
CoCreateGuid
CoCreateInstance
CoGetMalloc
CoGetObject
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ