86833cce02d105d62faaba04d4352711_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86833cce02d105d62faaba04d4352711_JaffaCakes118
Size

19KB
MD5

86833cce02d105d62faaba04d4352711
SHA1

5d702cff868a520d29991dd780985b0a5c7f4836
SHA256

cb928cc07d8cce8890e6d1f64c51601b574df73c4f72f8a83ca9c1a4dc26b449
SHA512

a2aef3e7ed9e827582c70fbb462f321e64cf950767d998d77d755cd77a8ed3aba96a0eeb5848573beaaea5661af0dd0b48a3dcff59137a7df670587aa878fcf5
SSDEEP

384:a9V+DcKnUEVFDhkcJT53DTmsBYEnjx8ih3xpVKoQMijl8TSxBNkvGNVCX:KRKUEHDv3DTJpVBhBpVKoNTS6vGPC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86833cce02d105d62faaba04d4352711_JaffaCakes118

Files

86833cce02d105d62faaba04d4352711_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f6403cdac1208d8467275952b5641b26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

sprintf

Exports

Exports

input

Sections

.text
Size: 14KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE