a5202a988415814ac6854e3361f95627_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5202a988415814ac6854e3361f95627_JaffaCakes118
Size

100KB
MD5

a5202a988415814ac6854e3361f95627
SHA1

0062df3064d75a0b93b4076033f0791dc0c4e0a1
SHA256

1d380b4e9ebe6b0572f18c0052f72d055143d94581fbb19905205d4d4bb79cad
SHA512

55ff624bad4da8214ceb516c947910cb30ddd23791e6e46e1d0ea4f4469927dd7bde53e18a44ee867828ff28e4fec103d61946e06c6210b957f562c54664c5cd
SSDEEP

1536:zbW1WJKLZsjd0zzYPH/rgUk/bOOXowZTX2RxPZW36KxsWhUQc2Db5n53D7oJ:zqAIZsjd0z8/zxk/P4bo6KxsWpcKFlny

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5202a988415814ac6854e3361f95627_JaffaCakes118

Files

a5202a988415814ac6854e3361f95627_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 65KB - Virtual size: 204KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ