898f9465fd86ac3cce24967fa997dba2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

898f9465fd86ac3cce24967fa997dba2_JaffaCakes118
Size

48KB
MD5

898f9465fd86ac3cce24967fa997dba2
SHA1

e6b720efea0b0619ff634470459bc95037717a0c
SHA256

10f42c03e67c9c5e61820f80b78d32d668876727c3f9107a1d5074775697dd45
SHA512

25a00e98ebfe8676da188c6f7f8fc9aa257efbdedcf8ab5298c669d2e6b3f88edec487a1be7e0fe2722f552c346068f8d0e3e622f46b64cf078cc707963422cd
SSDEEP

768:WO9VmvdvQrB4OuHmHZd3Jn4HEmlB5tjDyDwqyvIzXo9:wiyO22FAE05heYQbo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
898f9465fd86ac3cce24967fa997dba2_JaffaCakes118

Files

898f9465fd86ac3cce24967fa997dba2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f2f5935080f342a0d624e24cf834d1dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
CloseHandle
GetStdHandle
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind

user32

GetForegroundWindow

Exports

Exports

DllInit

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ