7881351bc2cb3b06f22d740911237b3c_JaffaCakes118 | Triage

Sharing

General

Target

7881351bc2cb3b06f22d740911237b3c_JaffaCakes118
Size

3KB
MD5

7881351bc2cb3b06f22d740911237b3c
SHA1

857d82e390335731be82c95ea13bc79996ed7ac2
SHA256

f13b53be2215d73bcb8a4169e226032cf98262e1135189b5379a20773dfa763e
SHA512

a7143e16faf438b8625263ba4a2fb4ddd143522a5ef654b51c9de1402a54a31525c9d9ef06df07e0a88b1e74d845b0e416dbfd01a5f318f5608498ffef23e284

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7881351bc2cb3b06f22d740911237b3c_JaffaCakes118

Files

7881351bc2cb3b06f22d740911237b3c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

21a3bc014049dcc31d9f0e3d40282683

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExA
CryptGenRandom
RegEnumKeyExA
RegEnumValueW

kernel32

VirtualAlloc
HeapAlloc
GetVersion
Module32NextW
SetTimeZoneInformation
GetSystemInfo

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 33B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ