aa020fe1a9a8fe9b8037945e1cebe765_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa020fe1a9a8fe9b8037945e1cebe765_JaffaCakes118
Size

89KB
MD5

aa020fe1a9a8fe9b8037945e1cebe765
SHA1

a818bddd7a68274636a9076236cdfc96f37f3f0d
SHA256

14917358a03173379af34def3ea5e266286e7cf10959ba4eca17479c46009f94
SHA512

7900e7b49d2fb08f7656db2857f91dc591f2a961ea338869142455390f6c7196266eb0b77cada2b799387006bf1ae368fa4fce4ab400a283a90609c907ccde3c
SSDEEP

1536:1F4I6d8aWZ6p8vhPWSfVAdKM4moAL6gbjm:cIi8aL8ZPWSdsKXmok6X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa020fe1a9a8fe9b8037945e1cebe765_JaffaCakes118

Files

aa020fe1a9a8fe9b8037945e1cebe765_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4ae8cce1cdb668a8fad907517a62efc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileA
Beep

Exports

Exports

ibylxanuc

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ