ab40fc96cbcf817330b8fdb396e5a015_JaffaCakes118 | Triage

Sharing

General

Target

ab40fc96cbcf817330b8fdb396e5a015_JaffaCakes118
Size

427KB
MD5

ab40fc96cbcf817330b8fdb396e5a015
SHA1

4893aaca98172ea802642e0e97604d215308e23e
SHA256

1ade99499a4ee6b35632c0858697a2da5993068ba35b554e638ba1c3e3bfe627
SHA512

c511708fd9c1804bc2c22061b6feca120dc035010307475eb2b1f936f82333320aa7632b1a1f458b10f73c4ab6a5166c7936c05183565445a284a2cdd83a5b59
SSDEEP

6144:NuTY0fjUa8GLFdeohFlR9jSizZ0VNcz3v7ENTh8EDM9lyNHaghMcEK1dtyFK9YAF:6H8cFZhFfHZ0VWz3vIT72uWK1mogI68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab40fc96cbcf817330b8fdb396e5a015_JaffaCakes118

Files

ab40fc96cbcf817330b8fdb396e5a015_JaffaCakes118
.dll windows:5 windows x86 arch:x86

6cffdb8e7ad8c4be09ae2d0b1ee32146

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceLanguagesA
ExitProcess
FlushFileBuffers
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetVersion
HeapAlloc
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcpyA

msvcrt

__p__commode
__set_app_type
_cexit
exit
free
isdigit
__getmainargs

ole32

CLSIDFromString
CoCreateGuid
CoCreateInstance
CoGetMalloc
CoGetObject
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 412KB - Virtual size: 1007KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ