ab248b6456b6f7b7f5bd168ead05a655_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab248b6456b6f7b7f5bd168ead05a655_JaffaCakes118
Size

90KB
MD5

ab248b6456b6f7b7f5bd168ead05a655
SHA1

1de5fc62db62f465bef6f01b596c4b4e944ca86a
SHA256

28cc4983abb6c1c21233e22907bbd7cfcbf872dca568cb2c9fa5e62cb3934305
SHA512

702c1b38e304502e31677b3ac6aa556ba0137a25bd9270c132013dc39b8b251dd0171e93e74f0a3e70e3efd2a7418811d8bd3b1fd0260dba3138ca93c8493c6c
SSDEEP

1536:tRx6PdqtNwNkY0kRYk8MDrXR5ZWiXWLmBcK3ainnEPShGbA4MhaCh8:3AVqtkkYb/giXWnKKyE6hG04MhaCh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab248b6456b6f7b7f5bd168ead05a655_JaffaCakes118

Files

ab248b6456b6f7b7f5bd168ead05a655_JaffaCakes118
.dll windows:5 windows x86 arch:x86

404cd78c7338cd6369b954014b2d4f22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtect
ExitProcess

user32

CloseWindow
BringWindowToTop

Exports

Exports

Csqeuehvof
WriteSkobqwiuwpc
WriteQmhrwcncky

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sec2
Size: 1B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ