627da26304d336db3e8a914cbde16980_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

627da26304d336db3e8a914cbde16980_JaffaCakes118
Size

270KB
MD5

627da26304d336db3e8a914cbde16980
SHA1

814c58f4de20d8179deccbf473be0a6db39b4343
SHA256

95601221d96ad04a82a4e5c84e9e7325e24eb8ac5618f71c55497b4522b14787
SHA512

a2442b83af84e03c47ef62ab6052e24f4fdf0acb9101d2909d35c82ae8696278a002cc92b95ed2f32681a233a2145d6b9d669f2cfefc4c1f604cee32a51cd026
SSDEEP

6144:ZmhHg2VsOmMVz98OzyzPkEwhQvJCoN4og1lN7ooshQ3Rpq:GA2VsOmMV58O4PkEwCgoN4okNEoshQTq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
627da26304d336db3e8a914cbde16980_JaffaCakes118

Files

627da26304d336db3e8a914cbde16980_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5294100eb7b9e82fcef3bcaea36abfca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetLocalTime
LeaveCriticalSection
ReadFile
Sleep
EnterCriticalSection

Sections

.text
Size: 22KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ