7350dc6ed8d3e3d4b5cc998b142607da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7350dc6ed8d3e3d4b5cc998b142607da_JaffaCakes118
Size

48KB
MD5

7350dc6ed8d3e3d4b5cc998b142607da
SHA1

0c823533ee5a172341cc2540baf13cc17334f659
SHA256

965ec380bca1f1ea828a4ac7f2b1fdd3db7df84278c551ed17dde4b9d368677a
SHA512

9e11163127faaf84a74b54991fba4dc7d96b7eaf91914f6c667eaa7701a2c920ff5c0c12e93d4f65bdddc89d775b3bc1177e3c19077759ee9a2935d2d04582c1
SSDEEP

768:+wjs2VDTZW8ykKqhI4AfvlB5tjDyDwqyvIzXo9d:Tjs2Q8y8O4Y35heYQbo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7350dc6ed8d3e3d4b5cc998b142607da_JaffaCakes118

Files

7350dc6ed8d3e3d4b5cc998b142607da_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f2f5935080f342a0d624e24cf834d1dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
CloseHandle
GetStdHandle
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind

user32

GetForegroundWindow

Exports

Exports

DllInit

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ