a8c9e4a4c7f49192b465538459cbc335_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8c9e4a4c7f49192b465538459cbc335_JaffaCakes118
Size

122KB
MD5

a8c9e4a4c7f49192b465538459cbc335
SHA1

e94dfad4faefb226a4ad0e042ff0d7ab9624e03a
SHA256

734fead4eab727eadc028336a431e33713a70ea14a3717526863f3d4496d531b
SHA512

b15eae6cd378d9ffa372eba40827999e04612eeed9938b96608278d41a168e246be1519bf12191a415db43976f42beea04cd84693159e352b22eb3e0c04d8775
SSDEEP

3072:WnbJpEypKc+JjCc3Jcy006iSmmG/6icKdYlO1:sbJpd6GcOrmmi9cKd2O1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c9e4a4c7f49192b465538459cbc335_JaffaCakes118

Files

a8c9e4a4c7f49192b465538459cbc335_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1df0de6e7c04336218c5d9de6fb34d44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar

user32

CharNextW
EnableMenuItem
LoadStringW
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 106KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ