a941f304b464262cc20a222866f75d9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a941f304b464262cc20a222866f75d9f_JaffaCakes118
Size

197KB
MD5

a941f304b464262cc20a222866f75d9f
SHA1

c1339800d44ebb0d34fefbe1eb01d2632f5e0edb
SHA256

619c34f9f30cdc915dbdcf49499dc1cba853cfc9db3c818e171c5b7790fcf7fa
SHA512

0b51a3b894da4851537c1661836d477acf21272bce8a9f96c24c2e4e9a96df7cb451320979e5eacbdc0fef21f28466dd4983d284d63e9dccda71f2a17c05f7a2
SSDEEP

3072:ISEJvTrRYaIAHurlx8K1kt0RlDJAdjV0bmJ6qXhGfleR1DW:d2rWVx5m8lDJ+r6ShGfY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a941f304b464262cc20a222866f75d9f_JaffaCakes118

Files

a941f304b464262cc20a222866f75d9f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

67fceb2bac7fe3d65a472d923b5cfaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetACP
GetCurrentThreadId
GetOEMCP
HeapFree
InterlockedDecrement
InterlockedIncrement
ReadFile
UnhandledExceptionFilter
VirtualAlloc
lstrcmpiA

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 157KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

.rsrc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ