63d02ab2fb553e3a63044bbfaf5c63f4_JaffaCakes118 | Triage

Sharing

General

Target

63d02ab2fb553e3a63044bbfaf5c63f4_JaffaCakes118
Size

54KB
MD5

63d02ab2fb553e3a63044bbfaf5c63f4
SHA1

d1d45c1e2c024d8932ebda7abec0c86166a2ddb9
SHA256

f1dd6f1653c8fe1b0bad728e91e2dbcad0d190a95b90c17d34b9c77874b7d273
SHA512

50e7cc7ec4acc6972e9b851a771839713512c9385a2764255a8bee4f98ee00fa1441f97cd202fcc634081d171ea1918cd4558dc2f90576dee028f5a3f5f01ad8
SSDEEP

768:U12H+68Q5wC1LqZuWMol+SdvJ44R3x9tqgWPUJ30rXh+ENidvZu743BPwT0r0:U+uCwC0Zwol+Sh3D90T6wlNidi4C0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63d02ab2fb553e3a63044bbfaf5c63f4_JaffaCakes118

Files

63d02ab2fb553e3a63044bbfaf5c63f4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4fa17fc110602e09aa7f1f3e6407fb21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ZwQuerySystemInformation
IoFreeIrp
IoCreateDevice

hal

KeAcquireSpinLock
HalMakeBeep
HalProcessorIdle
KfLowerIrql

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE