96317a91f1e9e3eaaec77fa480aa26e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96317a91f1e9e3eaaec77fa480aa26e7_JaffaCakes118
Size

12KB
MD5

96317a91f1e9e3eaaec77fa480aa26e7
SHA1

9bb3aac48f6773dd9240cad2217ee93f66073e85
SHA256

ac76b8838014ed2bc42dd206ecf66faf56d127d016c06346053e9e70dc49334b
SHA512

6d2e1c7d9552f325186da12de526940a376fc99d05fd776a49d04da33aa0e0267c45d78a6da29856a64aff9d3bd56409c153bfa22b787d1d00f49ade194ee31b
SSDEEP

192:dpAQo5BJR7ok/uPYQcQWHdWwD42ED4uUSChw4Lh/2MXcbpohXyxfRpCH/vkf3WSg:dp1oJhwMVHdVxL71Xcpg4Rplf7QPYwEm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96317a91f1e9e3eaaec77fa480aa26e7_JaffaCakes118

Files

96317a91f1e9e3eaaec77fa480aa26e7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d7eee3efd595dcd1c2e1655930b1fa3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_strcmpi
__CxxFrameHandler
??2@YAPAXI@Z
_except_handler3

kernel32

GetProcAddress
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetLastError
MoveFileA
SetLastError
lstrlenA
GetCurrentProcess
CloseHandle
lstrcatA
LoadLibraryA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ