78b97532c5588027efc019d34164bbb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78b97532c5588027efc019d34164bbb1_JaffaCakes118
Size

104KB
MD5

78b97532c5588027efc019d34164bbb1
SHA1

6bdad660adb5940a5d59d6c925ddff991deb0e1f
SHA256

1ec87a04d9f582dd0f5554bcd9b502fcd0970480b2bd4ad698d51404a614be4d
SHA512

62a1aa478801d81df71df8a75f0c291c74d2e9f2e86912a91ca9918a9ca463caaf55492822330eb72cc7e0fc00ef507d48ccae5120d1bd11749a8d48c41401c2
SSDEEP

1536:RCXzNTO1ZHNCL6dUowk9WpLXJ4A1EzjEyEe8MpjcHzBvAR:RszN61ZHNCLVoByXJt1EzjCuihO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78b97532c5588027efc019d34164bbb1_JaffaCakes118

Files

78b97532c5588027efc019d34164bbb1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e78dbf52e3ba3b2321faffc5e12c47cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
GetTickCount
ReleaseMutex
GlobalAlloc
GetUserDefaultLCID
GetNamedPipeInfo
DuplicateHandle
DeviceIoControl
CreateFileMappingA
WriteFile
ReadFile
CreateFileA
DeleteFileA
HeapAlloc
GetProcessHeap
HeapFree

msvcrt

_except_handler3
memcpy

netapi32

NetUserGetInfo
NetApiBufferFree
NetServerGetInfo

version

GetFileVersionInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 890B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ