aaed9219779593c3bc5033b288102ec9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaed9219779593c3bc5033b288102ec9_JaffaCakes118
Size

81KB
MD5

aaed9219779593c3bc5033b288102ec9
SHA1

a0bb66a2660bd4e0a523b77e0c80e0ad3763bc77
SHA256

77d09fbba009f4ebc3e4cd00b21793fc7063b64ff0f3c4264541fe1af13d84c0
SHA512

5ec217c13b02f5f7e2d12f52fc409d413c0339385498f11daeb015d33d8632f3bfc9872a757bcfe197288df950457f08b043a8735b9439032e3149768e862a6c
SSDEEP

1536:dlfICTwXZo/ohvTPlpfm1L08Y8c7w26ZUKJ6EHE/l7CiVCwDYnm:dlfICTw2/ohvrlpCLBc7B7c0CaDwm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaed9219779593c3bc5033b288102ec9_JaffaCakes118

Files

aaed9219779593c3bc5033b288102ec9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e1625d8071406afdd29d60bedf6aaa09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetFileSize
OpenFile
lstrcmpiA
lstrcpynA
lstrlenA
ExitProcess

Sections

.sforce3
Size: 24KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ