8bc360a7af6391fd601e3889d1d14e2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bc360a7af6391fd601e3889d1d14e2a_JaffaCakes118
Size

82KB
MD5

8bc360a7af6391fd601e3889d1d14e2a
SHA1

f1599c8d3310333613ee466b2b026e363bdc3b4b
SHA256

a12d9923bba0e42d0c85948b1388001fb1ae075ffaffb6542dc2dacd0715c2e2
SHA512

d4a71abffaf25f2f0d594c145a2b8fa9d4ff8a321aac2b42fcd99962ba25abad699d4b09364ae35377becee3a744d64800507c2bd4be5d1e3daaa617a0307d96
SSDEEP

1536:wX4ZP0+wBRUnIRDwXgAX99mjdX2tHtaqPR+S1NUYLdDH0KX0UF5mmjdLZd:wX6gmFgAX9IjdXSHtnPR1BdXF5plP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bc360a7af6391fd601e3889d1d14e2a_JaffaCakes118

Files

8bc360a7af6391fd601e3889d1d14e2a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d428e0374460bf1ca8e98eea2bc3c097

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceTypesA
ExitProcess
GetStartupInfoA
GetTimeFormatA
GetVersion
OpenFile
SetEndOfFile
lstrcmpiA

Sections

.sforce3
Size: 25KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ