85bd0ec9db1b8ace5c92c32ce1587abd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85bd0ec9db1b8ace5c92c32ce1587abd_JaffaCakes118
Size

37KB
MD5

85bd0ec9db1b8ace5c92c32ce1587abd
SHA1

5b636ec7091c42b445aa03e6aad47bc4108f20c5
SHA256

98aedfec29acb6725a03597b3c5d2b5b307fa9d3160ab62952a10963da33a8be
SHA512

009fb63a5c574bdcb7047a4a8e5e06555fa6f1cbb3618a771918d35281b0dc949536eca4487a638ba2d580497965ffbe243a6c8934cf372010bf05b4cd83a60f
SSDEEP

768:fIhshs3IDsi1tHOg7cA1tIxA/VKD7RZ07SvmhXmE2lmophN2:ghshs3AuEm7RS7DmHEq0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85bd0ec9db1b8ace5c92c32ce1587abd_JaffaCakes118

Files

85bd0ec9db1b8ace5c92c32ce1587abd_JaffaCakes118
.dll windows:5 windows x86 arch:x86

856bda21264d81074431438ad241544d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcpyA
VirtualAlloc
GetWindowsDirectoryA
lstrcatA
CreateFileA

user32

GetSystemMetrics
LoadStringA

advapi32

RegOpenKeyW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ