a2769b172a151a93c20b1a772fae964f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2769b172a151a93c20b1a772fae964f_JaffaCakes118
Size

11KB
MD5

a2769b172a151a93c20b1a772fae964f
SHA1

d819f6f6b153513bb8894d6b1ee687febc4b342d
SHA256

65cfe0da7b370c6176f2575c36f216504cb22a3679388709fd9ae947758b5d9d
SHA512

2146188fa644a9b8927ddc6b691e585a1ef26d4ac9093989a84a25b5e077f8c5818f8a546726574cb64f1a1ff2e6f1dac691274d3fa962d47141c578e348d33c
SSDEEP

192:tWOYkvPzv9yadaFFMAYvNt5RAjSszlX3kG2lbWKuZtf8uHsi0:tJYkXzLdwFMbNV4lX3kG2lqKMgH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2769b172a151a93c20b1a772fae964f_JaffaCakes118

Files

a2769b172a151a93c20b1a772fae964f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

25f97a1d064c12f58131708709e78bba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateThread
LoadLibraryA
Sleep
WaitForSingleObject

Exports

Exports

CreateProcessNotify

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 275B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ