a0cd3e35f07cbf377dd8136080063b45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0cd3e35f07cbf377dd8136080063b45_JaffaCakes118
Size

96KB
MD5

a0cd3e35f07cbf377dd8136080063b45
SHA1

c0a1dcc2bac08c0b7f8864e80690127725fbcf80
SHA256

75499dcdc337f87969cefd09cafadb7757ecfb60c80e27ab4df408575c7068ce
SHA512

9fe3a1a9598a2444925ec8f671f937cec22c8fa5284224eb86736b6ce5036992c129ee50f61bb62c7c195348f457170cc2571e315bfbced71d6e3deda95d1b5f
SSDEEP

1536:sVz99H7NDF5LmobsMKbM82NrC9rXvOXdNKKbMrRYnOlrqIBrcBsEF:shPbNDFxlbFKHyrC9rXvyGrynOo0Ip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0cd3e35f07cbf377dd8136080063b45_JaffaCakes118

Files

a0cd3e35f07cbf377dd8136080063b45_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4e2bbbc60e11fdad7e224d523c70dd38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GetCommandLineA
GlobalFree
VirtualProtect
lstrcmpiW
GetLastError
GetModuleHandleW
LocalFree
FormatMessageW

user32

LoadStringW

ole32

CoTaskMemFree
CoTaskMemAlloc

msvcr71

__dllonexit
__CppXcptFilter
_adjust_fdiv
_onexit
_except_handler3
_wcsnicmp
_vsnwprintf
memset
fprintf
_XcptFilter
free
_initterm
malloc

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ