9fc9192c6ab20ace3c0902627240d270_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fc9192c6ab20ace3c0902627240d270_JaffaCakes118
Size

6KB
MD5

9fc9192c6ab20ace3c0902627240d270
SHA1

0d3f7ecaefc8cbb117c9dc047c6225912e2a94d2
SHA256

271cf66fb9a8ad2d7c48fb9923f1ac70c71372144836f66e7e76f0b3bdebb97a
SHA512

48513f1e703bc5f09d87ee3eb864b74664edb600260da99386492ed7bef451c2cc40644946a2e932b1a633f3526d63ee2deb474f3e057ecb46466ad05c3e21ef
SSDEEP

48:i62+Mqi8OLBJAEAngOthlD2f/3kbKTiHkPwSYJu6hM/M/M0f:NnWvTQg+LnWokPyJu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fc9192c6ab20ace3c0902627240d270_JaffaCakes118

Files

9fc9192c6ab20ace3c0902627240d270_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1d85c957fc5b45e695bb43fe670502c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
Sleep

Exports

Exports

MagicDelete

Sections

.text
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ