a8675827fef1cd0fbf77c25540996d99_JaffaCakes118 | Triage

Sharing

General

Target

a8675827fef1cd0fbf77c25540996d99_JaffaCakes118
Size

4KB
MD5

a8675827fef1cd0fbf77c25540996d99
SHA1

b7dc3cd4ca3a545c1ad94164136d595d1b2f87ba
SHA256

3eab1dab42e8d2f15e5c0953f512cfce4bcb058af9a048def11c353b74a6f32c
SHA512

309243d10c28845afbf29dd3389b2b82fd52c0a7c57d1012220aa253db11a326ebbd8f06a76cd05399bccb5deabf669fc2dae38e1ee82de31a8365d0f5af50a0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8675827fef1cd0fbf77c25540996d99_JaffaCakes118

Files

a8675827fef1cd0fbf77c25540996d99_JaffaCakes118
.dll windows:5 windows x86 arch:x86

62a0a679d4028229d25aa850a97e279d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ksuser.pdb

Imports

ntdll

NtCreateFile
RtlNtStatusToDosError

kernel32

GetProcessHeap
HeapAlloc
HeapFree

Exports

Exports

KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ