76bb63b5aa4aa541dc79840e3bb8cf4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76bb63b5aa4aa541dc79840e3bb8cf4c_JaffaCakes118
Size

30KB
MD5

76bb63b5aa4aa541dc79840e3bb8cf4c
SHA1

295a2233054245dab3db6d00a8a3c813dffe6582
SHA256

4c13d4c04f275aa0f132c0e47740a6a2b48c693a4dbe90730f8ef45927df1461
SHA512

ef2b26c68f90753749233785fcf7587704ba733cbef9dda27f9bae6519772a1da34352934df32fe7b6c29fce7580e1e7febb286cc3155f1eb0507619d0f85cac
SSDEEP

768:KeiBYyITABTsFJsfbtkuCtp1Z5F6oxkih:qYuozEbtku095F9vh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76bb63b5aa4aa541dc79840e3bb8cf4c_JaffaCakes118

Files

76bb63b5aa4aa541dc79840e3bb8cf4c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

d6f20f81a223cc90bece848290f3e35c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
LocalAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpiA
lstrlenA

msvcrt

_XcptFilter
__getmainargs
__p__commode
__set_app_type
_exit
exit
rand

ole32

CoInitialize
CoTaskMemFree
StringFromGUID2
CoCreateInstance

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ