7385443715f9f612b8d8f6e8e9ec3967_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7385443715f9f612b8d8f6e8e9ec3967_JaffaCakes118
Size

97KB
MD5

7385443715f9f612b8d8f6e8e9ec3967
SHA1

86f8460391c78cf81a819057d2f01cf456e72a71
SHA256

684804a0de40b8e1ee4b1ee17676cf279679ac5f0fdc43edf1071ac53802c042
SHA512

beec6b6079ac50798e879b0077e9c565a41f910f9eb1bc9c805c51c47030b8d0e2a895b3e9d9fb44a166764fd10f63f316032cc7a753eee6559a6208675f841c
SSDEEP

3072:kpwjhO8NnmaYyDC8Kqxxm6im40GidF/3E5:kijbnxciH40GiTc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7385443715f9f612b8d8f6e8e9ec3967_JaffaCakes118

Files

7385443715f9f612b8d8f6e8e9ec3967_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 66KB - Virtual size: 208KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ