9427d3d5542951368b58146ec3a1ff3c_JaffaCakes118 | Triage

Sharing

General

Target

9427d3d5542951368b58146ec3a1ff3c_JaffaCakes118
Size

15KB
MD5

9427d3d5542951368b58146ec3a1ff3c
SHA1

4b31e979cabba6c1e06d92c4a776da1ba4e1e035
SHA256

706097816ec782996b1ae14edd1e8e86312fbe6909edd074ec70b3b7d543bc9f
SHA512

447abf9e01358803b972af056e55d8407fad45a53270c1de5d8a7e13541caa4f52b0b81846d96296ee99070f3f34cbfd9f4943da0dcb5a0cc7f07253dc480f54
SSDEEP

192:hWIr2HkLgmNmsk7mhWURnBWlwNG0yWS2MPt3AU3V2OLkpoKHeEmhCR:3rSkLUmfNY+MV3QOLG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9427d3d5542951368b58146ec3a1ff3c_JaffaCakes118

Files

9427d3d5542951368b58146ec3a1ff3c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

43eecaea1f626a218627a9cba0315a3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
VirtualAlloc

user32

FindWindowA

Sections

.text
Size: 1024B - Virtual size: 606B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ