69eeb6d1558b7d23197f0ef9974505f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69eeb6d1558b7d23197f0ef9974505f0_JaffaCakes118
Size

4KB
MD5

69eeb6d1558b7d23197f0ef9974505f0
SHA1

f49432eb99a431318dddfcae13afa19df9f35bb1
SHA256

bb90db0d5f500345b2be7e0c85200cc9b9a185fc2f6005d74ddad63efcb6253f
SHA512

509379272a6b056050e50c8476bdec485485fecfb189ddf974026e4426d452affbf43718763dd2d881a599e6e72031fb3f5e514cf304e82ee07a6bd6614db67a
SSDEEP

96:qVkOi2S9u9Mx9d9Y/v29gz9K9lZ9pgWQeKzDwkOit:ZOi21/vhSpgxeKH3Oit

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69eeb6d1558b7d23197f0ef9974505f0_JaffaCakes118

Files

69eeb6d1558b7d23197f0ef9974505f0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0f4c0a949f549c518d32ae5b43e1cfd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
Sleep
CreateThread

user32

FindWindowA
ShowWindow

Exports

Exports

DVD

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ