6ee72b5518a2765a0cbc7e8c3b4bb2fd_JaffaCakes118 | Triage

Sharing

General

Target

6ee72b5518a2765a0cbc7e8c3b4bb2fd_JaffaCakes118
Size

92KB
MD5

6ee72b5518a2765a0cbc7e8c3b4bb2fd
SHA1

6779044ec38820abb3f132c165da8e5f9a8bddf4
SHA256

9dc6329ee59f3b2f1beed56dbb62eb49dd9c40466afa8d7186aba730c436c32b
SHA512

31347d4557ad4fe57bb85a542ee0ee5b2d757ba7b840a2c1bb2a00451980a1acff9af55e38c2d44494c8c76744bbfb6d091591bd17524c6db69294fc6d9034db
SSDEEP

1536:L0mNBs6xaIjL/KCxVjXvUqdKaPCMwSafEm6J3iolcqcCLZBBagUPm92Fm1iOB57a:7NjbRtX8qdKaPCMwLf2ioGqp1a+0057a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ee72b5518a2765a0cbc7e8c3b4bb2fd_JaffaCakes118

Files

6ee72b5518a2765a0cbc7e8c3b4bb2fd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d107b47a6994fe2d14e9e2821296c08c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
UnmapViewOfFile
WriteFile
lstrcatA
lstrlenA
ExitProcess

Sections

.sforce3
Size: 26KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ