8bd5af028d113334b25e67556df10c3a_JaffaCakes118 | Triage

Sharing

General

Target

8bd5af028d113334b25e67556df10c3a_JaffaCakes118
Size

37KB
MD5

8bd5af028d113334b25e67556df10c3a
SHA1

65f5672bfbd45fd45438f4fe0e119cce2afab2fe
SHA256

964ed0d7574fc5a5ceb554293f675ab18a407b3fcaf4c771f313919e1049c22b
SHA512

91f2e1277a4ca727d02b3dfa656e52ab2671bea034e9e14a343107dc337c0c5e9ab591530dac7dc63b585468c583fe67f8438e9a0375afabf5f9c20628712836
SSDEEP

768:ULKBwF2bkAmMNp5hwLgYBBCK6TqLNcrXU1SzZ7jy/aGVda2Hjzuqth:ULa22ojMp8sYBBCKxNcQ1+3caGvaau6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bd5af028d113334b25e67556df10c3a_JaffaCakes118

Files

8bd5af028d113334b25e67556df10c3a_JaffaCakes118
.dll windows:5 windows x86 arch:x86

fa3c7ceda10d6609f9131c0ca864bee4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteVolumeMountPointW
VerLanguageNameW
MoveFileWithProgressW
OpenMutexW
FillConsoleOutputAttribute
ConvertThreadToFiber
UnmapViewOfFile
ResetWriteWatch
_llseek
DeleteTimerQueueTimer
SetMessageWaitingIndicator
LocalReAlloc
FindFirstFileA
SearchPathA
PeekNamedPipe
_lread
GetStartupInfoA
GetDateFormatW
SetConsoleInputExeNameA
WriteFileEx
SetConsoleCursorInfo
WaitForDebugEvent
SetConsoleDisplayMode

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE