6818841e30942365bb61c6fa9c286895_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6818841e30942365bb61c6fa9c286895_JaffaCakes118
Size

22KB
MD5

6818841e30942365bb61c6fa9c286895
SHA1

c3ff5ff9e95aa0378d6814bb03a6f3b7a15decb7
SHA256

33eb3ea81711bd417c21da60d74c6644537df544739dae2c7aca3bdf7ae9e2f0
SHA512

51d373d1540ec35b277dcda29c6b6a888817a17c1fdb9ba378d08b46b1ee305d38d1f9a39b0215ff23a53001d1e2841481b1e7b7beb94281f92956ab39fa47e9
SSDEEP

384:R8dlatieTMrWTQM/brGM0EJJBGjVKCKzm5L1rOzr995:WHatiEpj6M0andm5LBOF95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6818841e30942365bb61c6fa9c286895_JaffaCakes118

Files

6818841e30942365bb61c6fa9c286895_JaffaCakes118
.dll windows:4 windows x86 arch:x86

05f74346c5bd2d43502fb7b32cecd993

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId

Sections

CODE
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 32B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 245B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 68B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 437B - Virtual size: 437B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 192B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ