693b6afe6bfd9cc497282bb10bb19a7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

693b6afe6bfd9cc497282bb10bb19a7b_JaffaCakes118
Size

17KB
MD5

693b6afe6bfd9cc497282bb10bb19a7b
SHA1

2adb244af86fcc2a7d10c1a38829d74c67e679fb
SHA256

5603e826090442d240c00d550943e0ee54973efa225e8422ea3fd07ee37e9892
SHA512

258fec50d83c1c8420e27490b04889c8cf078675dbde39c747c9b029062d4d331b9bb169fe994766c8af5f29b2c1a9ce5fc1a6221359d57499bfb48c349d909b
SSDEEP

192:x/STL6Z05o7RbJfOijSnuInpa1zIfTbenR/1A8C5:MTGGe9bJOijSnuInpatCTbenRd85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
693b6afe6bfd9cc497282bb10bb19a7b_JaffaCakes118

Files

693b6afe6bfd9cc497282bb10bb19a7b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7d573226a107c1d6226fbf3a5265f4ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetModuleHandleA
Sleep
VirtualProtect

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memmove

user32

GetAsyncKeyState
MessageBeep
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 928B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ