69ce673cdc0c005d6638f708a41a2e1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69ce673cdc0c005d6638f708a41a2e1f_JaffaCakes118
Size

95KB
MD5

69ce673cdc0c005d6638f708a41a2e1f
SHA1

5318b307c1cdea0083202ff255df71fb5fbaeda0
SHA256

48dac0c3d87887a4823848d2337770800f26d6316a2ea7ab0e7e0e737236e277
SHA512

9ef55b0feaf55382bdf97fbcb46442953b1eebfa362ca533c78c08ff0fedf8144ecc20d55df46197f51a915024faf09ccaaa8d41dd2d51a638ea099e7c55a8cd
SSDEEP

1536:t4sW7Z5PH90+n5fHTSTIzIfkgMxrMAfHF40jp6z7h997S2lyIaHPCzvMYZsM:tJWF5GA5eIz3gO3ch997S2lMks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69ce673cdc0c005d6638f708a41a2e1f_JaffaCakes118

Files

69ce673cdc0c005d6638f708a41a2e1f_JaffaCakes118
.dll windows:5 windows x86 arch:x86

39c3002e84450d368d9676a2f9e501cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

GetMessageA
SendNotifyMessageA

Exports

Exports

Vfbetvlvqe
Rjvyopr

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA2
Size: 3KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ