95f9612b67df3bdf8f308257f07989d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95f9612b67df3bdf8f308257f07989d3_JaffaCakes118
Size

116KB
MD5

95f9612b67df3bdf8f308257f07989d3
SHA1

9058a711670cd715f3e0105eb5068865679dc354
SHA256

9f38e2db79f4103e23733bd4417812bbc2bd17ac6015150e182586741553136a
SHA512

00cc121e10c42959e258ebffb01b7344503ed3d74cf1f6246324dd07f56b4a71e6ca0c794345da8aa8f90858638937348c971fe0046ffa0d939767a2c5d0eec8
SSDEEP

3072:VCG30N69wjdfTEdpcHQPBVWViQIShVlzah9f0plSGXn1BVC:VC9NTjZ1HcFShyh9f0zScn3VC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95f9612b67df3bdf8f308257f07989d3_JaffaCakes118

Files

95f9612b67df3bdf8f308257f07989d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f2dda16122038a3411aaabb150b9fe12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetVersionExA
InitializeCriticalSection
LoadResource
SetEndOfFile
TlsAlloc
lstrcmpiA
lstrcpynA

Sections

.sforce3
Size: 25KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ