63609097ed9323c8b1fe6783d1f2a8f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63609097ed9323c8b1fe6783d1f2a8f7_JaffaCakes118
Size

104KB
MD5

63609097ed9323c8b1fe6783d1f2a8f7
SHA1

bad5b47905e9ddecacab9fd7c3ab5fc9e23ef41d
SHA256

8e3bbfca30b43c7dca98296b3478cea1aaca04ed4aade0ed3d5c337f376b20ae
SHA512

0b6a5d0050daa9dd2f436ffb6403eaace12b444c6bbc15d912e9f631704221f70165361c61575268d988b58b4881261117917fb055d17bbbf4ff1a4e4b6029d3
SSDEEP

3072:Q06ous5iZsl5RbXC8KJ2KLsGLtGAO6ngN5W:Q06ou8io5Q8KTZLOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63609097ed9323c8b1fe6783d1f2a8f7_JaffaCakes118

Files

63609097ed9323c8b1fe6783d1f2a8f7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e1112b6722a3cce6443d7e0d778068c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitThread
FindResourceA
SetCurrentDirectoryA
SetLastError
ExitProcess

msvcrt

__p__commode
__set_app_type
fprintf
swscanf
wcscat

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ