6f91438b93a467363bad6184930a301e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f91438b93a467363bad6184930a301e_JaffaCakes118
Size

76KB
MD5

6f91438b93a467363bad6184930a301e
SHA1

9ec7b9ac61b0e9fe874ac7f4bdca48840bf381df
SHA256

830f7564db95918db109aec429b1c3549efe5fc224996ff90088f5a3c5e1d494
SHA512

7a43f42ed4e1226abfb8ec5790c224c720794e6152558f2c12416af2111071e8aba4f593f023ccb5dcfe5a37cfd06385e521939a1f93ffa1df49385ecc4e7cd7
SSDEEP

768:uQ3A6AqJ/rpLQeuRRTDZjcu9Jmmd46ihOgPmncSAhKJ9gA/Ep5n:uQw+DubRRTDZjLTmdjEZ/Ep5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f91438b93a467363bad6184930a301e_JaffaCakes118

Files

6f91438b93a467363bad6184930a301e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4dce087041d803114bf5927f8ede64cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
GetFileAttributesA
GetLastError
ReadFile
Sleep
WriteFile
GetFileSizeEx

Exports

Exports

principal

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ