a6a7f709e478ea88fdadcc637883b2b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6a7f709e478ea88fdadcc637883b2b8_JaffaCakes118
Size

136KB
MD5

a6a7f709e478ea88fdadcc637883b2b8
SHA1

08540cd5c61d9cbc0d11a2ee58a4780033d8c597
SHA256

374a3e1a7ff43e4ba12583238f3f51df07b0918bf7ad26b56072fa92a6e345d0
SHA512

d2778454f4db892d6db7586c9810327dda5dab07cd2a799ce4dae764c6b54d1c40da493d72f6a51d5ba6ea450335639f1be1e0e3dc77ff9b1129941e1a4ba493
SSDEEP

3072:dOH6U5tKGujKppsms25nrp2Te5lNafiDykd4:dOFcjKpXLNrMilNaKDyk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6a7f709e478ea88fdadcc637883b2b8_JaffaCakes118

Files

a6a7f709e478ea88fdadcc637883b2b8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a364c43d60a1584db6a0d9b7312aa935

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTime
GetFileAttributesA
CreateFileW
GetModuleHandleA
FindAtomA
VirtualAlloc
CloseHandle
GetProcAddress
AddAtomA
EnumTimeFormatsA
GetLastError
DeleteFileA
GetModuleFileNameA
VirtualFree
GetTickCount

user32

CreateDialogIndirectParamA

advapi32

GetUserNameA

Exports

Exports

CreateFileFromTemplate

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ