679dd76cef9158fe92e7b17628a57f03_JaffaCakes118 | Triage

Sharing

General

Target

679dd76cef9158fe92e7b17628a57f03_JaffaCakes118
Size

8KB
MD5

679dd76cef9158fe92e7b17628a57f03
SHA1

948d81ee35ac7e323fc78d3e7fac15bcbe7a2e92
SHA256

8674f95c49d3d93ed5dde0b79d4b041e437eb4501ea39552e56448b5ff2f81bf
SHA512

76239440c5f74c925287201c5cc254b46b73a77c2f742483858134b6838c4fdad002a670a788c5a83e6fbcd668f461408faf704e129c2eadab4271cf59f4f6da
SSDEEP

96:89KwyWrJOKL89BR+MKcoSA4psex/gcZU41VAfNIg2ODMko3I299eXXsep2PxTLec:/Wr85YcoStHJb1Vkf2OD76reXXspGc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679dd76cef9158fe92e7b17628a57f03_JaffaCakes118

Files

679dd76cef9158fe92e7b17628a57f03_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bab2f88105f1aa3a1736a47b6649426b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free

kernel32

ExitThread
VirtualFree
VirtualAlloc
RtlUnwind
ExitProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetTickCount

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

iphlpapi

GetAdaptersAddresses
GetBestInterface

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ