8cf25b6086abb7fe68d0dcc9c9bf52dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cf25b6086abb7fe68d0dcc9c9bf52dc_JaffaCakes118
Size

34KB
MD5

8cf25b6086abb7fe68d0dcc9c9bf52dc
SHA1

dae06e6875c72731364d7aa0037c4fffea77fd4b
SHA256

9c646b0dea7f8c4fcb3387f58c950c7c2cd2e3283f3b88742820b67370be77d5
SHA512

4d1d3c71816dbfb685e0cb09d415bca04b7a8bda602b29e01909f7f24b5986e733cd6bf6a655a25d619e4cb03f08bdc81626a99d8ea059848016a02b26bc7941
SSDEEP

768:uKyQUw2dfgo7CO1EfSqUFxtKuqF48wJ44rOg0:u1QUXNxEfSVcuCwa4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cf25b6086abb7fe68d0dcc9c9bf52dc_JaffaCakes118

Files

8cf25b6086abb7fe68d0dcc9c9bf52dc_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b862bcdfd5f35c34bd40a999dae9de30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTimeAsFileTime
HeapAlloc
VirtualAlloc
VirtualFree

msvcrt

__p__fmode
exit
fwprintf
isdigit
srand
strspn
wcscpy

ole32

CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeSecurity
CoTaskMemFree
StringFromCLSID
CoCreateGuid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ