95a83a24f43532dcd05d10ac7b3cc6bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95a83a24f43532dcd05d10ac7b3cc6bd_JaffaCakes118
Size

78KB
MD5

95a83a24f43532dcd05d10ac7b3cc6bd
SHA1

92e052d839cf43bd771707191eff04b8d8394c5a
SHA256

14a07adae7e1dd3e50db7f2b0fe3a36022cb82d3779e1371552ccb747ebe7142
SHA512

362e0f946376ce1d09cf8d9148851b6a2ee8cc647fc88a786ebdcd906a59527d0960515e5c4a9c39eeb12cc2c2965314498775a6741900db836506c5e90f1923
SSDEEP

1536:ckiyBtDveck/pDyVSywXmH+FfHweb2G7uAaNZ4qeudHeJ4Qu9yUmEMe:cIbej2SyNHelYA6Z7eJ4Qu9lZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95a83a24f43532dcd05d10ac7b3cc6bd_JaffaCakes118

Files

95a83a24f43532dcd05d10ac7b3cc6bd_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b2fa9b8406233b2e833ed28af6c6af5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
ReadFile
ReadConsoleOutputCharacterW
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA

user32

UpdateWindow
SetWindowTextA

Exports

Exports

BeginYmfjbhlvlg

Sections

.text
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata1
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrd
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ