a99ffc0a5f6bf5109acb5ddbfd2487bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a99ffc0a5f6bf5109acb5ddbfd2487bf_JaffaCakes118
Size

88KB
MD5

a99ffc0a5f6bf5109acb5ddbfd2487bf
SHA1

6c92091a80641550c7b62a8b53f7be156a2c012b
SHA256

499bb74b7d74c8c1cda979f804d23bdc51f12e5e4084b6000f45222a167f4a30
SHA512

a02b4bbd05843408bc983c27db82bb139c08a4780647bf012787a8f98b39c0236ba85169e3e4ccd8fe2fde2a037ec0de8d0e8a2626ea095b8f3d7f475a59db98
SSDEEP

1536:abAr+TyYkGNNx7++ZAQ5JfW6gPivbb1qu2tzduBObXAGy7p4:aK++YLNNx7rr586nvbbIIBEAGy76

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a99ffc0a5f6bf5109acb5ddbfd2487bf_JaffaCakes118

Files

a99ffc0a5f6bf5109acb5ddbfd2487bf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6cb0f215e0d9138ff15ee7dd8717cb3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeleteFileW
DeviceIoControl
ExitProcess
FindFirstVolumeMountPointW
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
IsDebuggerPresent
LoadModule
SetComputerNameExW
SetDefaultCommConfigA
SetLocalTime
SetTapeParameters
lstrlenA

user32

LoadMenuA
EndDeferWindowPos

comctl32

ImageList_DragEnter
DrawStatusTextA

ole32

CoCreateInstance
CreateAntiMoniker

dbghelp

SymLoadModule64
SymSetContext
FindDebugInfoFile
SymEnumerateSymbolsW

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ