8815e24203c5481d77b2cb41ba90876c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8815e24203c5481d77b2cb41ba90876c_JaffaCakes118
Size

92KB
MD5

8815e24203c5481d77b2cb41ba90876c
SHA1

863b0fd9408ea12ce11d54993be9f1b1f57d922d
SHA256

01a9563df9fc7b60b208b63a7a3be935d6a459e8fb4033e2b7cb66cde1745527
SHA512

258b287467baa64ca6d0feaacfe3e56e3e16d9514ae21f348f62552fb4ce78a426686c3761ebe050a074d8e5461d20b7f093165c7da4d0cf006f237e0b515327
SSDEEP

1536:Aw+a3hoNzZcWVSln9k2B3p1QoLT0E43C4t1h3ruc+LDA2q/faZcvNRaKje:WTnwlRfQJb3N/GgCZcje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8815e24203c5481d77b2cb41ba90876c_JaffaCakes118

Files

8815e24203c5481d77b2cb41ba90876c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6cb0f215e0d9138ff15ee7dd8717cb3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeleteFileW
DeviceIoControl
ExitProcess
FindFirstVolumeMountPointW
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
IsDebuggerPresent
LoadModule
SetComputerNameExW
SetDefaultCommConfigA
SetLocalTime
SetTapeParameters
lstrlenA

user32

LoadMenuA
EndDeferWindowPos

comctl32

ImageList_DragEnter
DrawStatusTextA

ole32

CoCreateInstance
CreateAntiMoniker

dbghelp

SymLoadModule64
SymSetContext
FindDebugInfoFile
SymEnumerateSymbolsW

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ