6fd311641386151cf247892de2c41a70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fd311641386151cf247892de2c41a70_JaffaCakes118
Size

230KB
MD5

6fd311641386151cf247892de2c41a70
SHA1

f2c1b3966e8b61e511e587232ca34abb01dfd67c
SHA256

fa3bcf80a7af5e00c05bf91801866afa881e29eec320b0aa9c0b5615e6883ffc
SHA512

debf4dd68ae5c034bcfb86f6156c4c42ca48ea79004169c28a0df62d8ed9c491c42223e74bdd2f28252aed0fc4936ae370fb472706d9b0cd196b341ac6d9ebe5
SSDEEP

6144:Kwk/8wlsjlxSIJZAGq6Yp2KVFYYO2iC1s3hr59hDW2z23Ko7s+wE+OyY3OX:Kwk/8wejlZXq6YpHVFYYeC1i9HDW2z28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fd311641386151cf247892de2c41a70_JaffaCakes118

Files

6fd311641386151cf247892de2c41a70_JaffaCakes118
.dll windows:4 windows x86 arch:x86

82d8e844213157c66fcc45569db91a71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
ExitProcess
LocalAlloc
OpenFileMappingA
lstrcmpiA
CloseHandle
GetSystemTimeAsFileTime

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 576KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ