837bb5bc59e38d0849b264712f3d1b5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

837bb5bc59e38d0849b264712f3d1b5c_JaffaCakes118
Size

4KB
MD5

837bb5bc59e38d0849b264712f3d1b5c
SHA1

0212dcc031a2ed7bfadb312baa87efb150303177
SHA256

857b7a4beb11606e120c42582dca95d82fcbcba9c685dbff0b26d1061077a139
SHA512

72eb8e4176624cc18f54b1c6594dbfc33eb721f7c316c31e75d322f2efe46892593d0041534b03520ad615c03b8f0c11a4573a8df0eda40d765cc0d30ef3f906

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
837bb5bc59e38d0849b264712f3d1b5c_JaffaCakes118

Files

837bb5bc59e38d0849b264712f3d1b5c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

62a0a679d4028229d25aa850a97e279d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ksuser.pdb

Imports

ntdll

NtCreateFile
RtlNtStatusToDosError

kernel32

GetProcessHeap
HeapAlloc
HeapFree

Exports

Exports

KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ