a8fa5a54b56adc5658e24db681512aee_JaffaCakes118 | Triage

Sharing

General

Target

a8fa5a54b56adc5658e24db681512aee_JaffaCakes118
Size

83KB
MD5

a8fa5a54b56adc5658e24db681512aee
SHA1

59d2705ef5e0c364266e3a327c8c281a2567a91f
SHA256

42b0b7bb7c39a81fffcd457868602a02f051f4dc62bce7b52f9a7c092a78c84f
SHA512

8f38f7d910fafd150f5a8fb3934f0e883c732721c176ef29e50afe18b84d9c7bd1877f7f97fe0c25fbe4b7f95fae9eff090766edcb2492276f43cb7f959f0424
SSDEEP

1536:cxqrFWNzH974mo5+i2I7/sDEfcHoICi2/X5eghGzZcrkziLjWv07Q+eqHYgVRw:cxqizd7Rxg/sYWCi2/X5egwOe2jW8Pe7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8fa5a54b56adc5658e24db681512aee_JaffaCakes118

Files

a8fa5a54b56adc5658e24db681512aee_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d107b47a6994fe2d14e9e2821296c08c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
UnmapViewOfFile
WriteFile
lstrcatA
lstrlenA
ExitProcess

Sections

.sforce3
Size: 26KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ