682d74e0f26b265bc634b09ce2a226bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

682d74e0f26b265bc634b09ce2a226bb_JaffaCakes118
Size

16KB
MD5

682d74e0f26b265bc634b09ce2a226bb
SHA1

26495b8041d87410caa8f56a2e77076419d9ac78
SHA256

9b1c2a066ccf164be1ca4b0dcf1ed31b3fdde2bc90090c06863b862fe1276cac
SHA512

e12fe14c0ab458c76d0cf6c5b5c0edd42f3edfd9954e3bf9a41b42012e41487e0696f551d002fd9c843b1937b98f29b8a54f915719e53252d64dc982becc699d
SSDEEP

384:X6k7GoHngcQgVVfv1S2VGo6OpWaIniuxMI2:Xf7NHgcQexVOnim0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
682d74e0f26b265bc634b09ce2a226bb_JaffaCakes118

Files

682d74e0f26b265bc634b09ce2a226bb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1794003c480f5a71b6470a8f60a8c5b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualProtect

user32

FindWindowA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ