a00c93b09f31f58894c52873ed08c0d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a00c93b09f31f58894c52873ed08c0d3_JaffaCakes118
Size

5KB
MD5

a00c93b09f31f58894c52873ed08c0d3
SHA1

8392f9eacb6559ac077636547f045531132552f5
SHA256

e232cdd3861f795238a6ecc9c0551ae83333bb6e4971cb29101c005892380c8d
SHA512

41fefd89d99c125dfbc8deae5ae60aabddcd9251b850765700c23cacff0e0dafc4fb6d1f5d0568813f4aea1b9eaa27c90a25633586952861f65d7db384fbefcb
SSDEEP

96:EMmyHp5FgCSIdbCh3JYOCgWIdQQZeXoTm6b9cPjKwc:RHpXgO5SiCRQEeXoa6bu7Kn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a00c93b09f31f58894c52873ed08c0d3_JaffaCakes118

Files

a00c93b09f31f58894c52873ed08c0d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

92299878954a049f0b165423e044caac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
memcmp
memcpy
_except_handler3

kernel32

VirtualProtect
SetUnhandledExceptionFilter
LoadLibraryA
GetProcAddress
GetTempPathA
GetStartupInfoA
CreateProcessA
Sleep
FreeLibrary
GetTempFileNameA
WriteFile
DeleteFileA
CloseHandle
CreateFileA
ReadFile
SetFilePointer
CreateProcessW
lstrcatA
GetSystemDirectoryA
GetModuleHandleA
MoveFileExA
GetModuleFileNameA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 871B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ