9463cffe7c8a999a9eb76c5374a3fc0f_JaffaCakes118 | Triage

Sharing

General

Target

9463cffe7c8a999a9eb76c5374a3fc0f_JaffaCakes118
Size

51KB
MD5

9463cffe7c8a999a9eb76c5374a3fc0f
SHA1

59b95bb9731b4680fd50e7b373a63cdc708e4650
SHA256

814fb89c1ab3a8dc0546e9d58cf0047810d7de732c45dff27a75a3662e980d55
SHA512

bfa512e9e7c03af4684c4c674b992a2ace6a84f80ac14c92bf85d7a79baa4ad3d02a57d9c938bc70602780397e5042976312ec0d0608c31f19c3d147b8bfdbd6
SSDEEP

768:k1Q3urdpBXkhMmdT4iscZtg6rBxIqWZ4dfQCjfelE5thm:k63uR7XIx41c3pxddylE5e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9463cffe7c8a999a9eb76c5374a3fc0f_JaffaCakes118

Files

9463cffe7c8a999a9eb76c5374a3fc0f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

70bbf64d0f81153373ae6d1c3e1825e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
GetCommandLineA
VirtualFree
VirtualProtect
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
LocalFree
InterlockedIncrement
InterlockedDecrement
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

ole32

CoGetClassObject

msvcr71

_initterm
__dllonexit
_except_handler3
_wcsicmp
malloc
free
_onexit
_adjust_fdiv
__CppXcptFilter

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ