707441de3b8e3618abbf0920d2e2835e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

707441de3b8e3618abbf0920d2e2835e_JaffaCakes118
Size

19KB
MD5

707441de3b8e3618abbf0920d2e2835e
SHA1

19d1400c27670c410d80de47357c3a79b986c9b0
SHA256

1d08a9e75f003f11e956d985c021e43c508020a04892ccfc63c368a88c05a136
SHA512

33341c90ff558edd2ec99154990aec024f0c9e75d125748c607961ce266f9113c82b4920eb477ef307bb8109c0509cc30497e312da93d1934574657fd548339b
SSDEEP

384:9MA07iv1P4Usacva8pxabCBCynfJCpLHGfJCpLpGfJCpLKY:9NvJ4/acva8ibGxnfGGfcGffY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
707441de3b8e3618abbf0920d2e2835e_JaffaCakes118

Files

707441de3b8e3618abbf0920d2e2835e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

def828ed49ca88f881274948cf6e5f7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc
RaiseException
GetProcAddress
FreeLibrary
LoadLibraryA
CreateThread
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
GetLastError
CreateMutexA
Sleep
GetEnvironmentVariableA
ExitProcess
lstrcat
lstrcpy
lstrlen
CreateDirectoryA
CreateFileA
WriteFile
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
SetFilePointer
DeleteFileA
CloseHandle
ReadFile

Exports

Exports

f

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 720B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ