a47c80506f6031749a6a724d3db61941_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a47c80506f6031749a6a724d3db61941_JaffaCakes118
Size

138KB
MD5

a47c80506f6031749a6a724d3db61941
SHA1

5e4d61f4eb189a7e4802f4f511515b901f2ef7d5
SHA256

92f0eecd54e69944adce5f52ca00957e55cda8b3dbb920cb1fec511f543496ad
SHA512

6299d0839e26a22ad0f21acc6087f7f14ec41d1239c8e4ea3fbaf28716de031d177f47988ed79ec9545b91f740ce78b6d950962e0f8ccab0bf55f8c4e7c39126
SSDEEP

3072:PUmP9kF3HX6gQ5URZx7QlN53eveTWJpds5ShGR52NluY27nyhp:PUdFH6gCURa5GJw5SY52/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a47c80506f6031749a6a724d3db61941_JaffaCakes118

Files

a47c80506f6031749a6a724d3db61941_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d752e294794bde96faeb4ce0eb29fe2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
VirtualAlloc
VirtualQuery

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ