ac7cab4e8204165e0a432fdcb2f2b4a5_JaffaCakes118 | Triage

Sharing

General

Target

ac7cab4e8204165e0a432fdcb2f2b4a5_JaffaCakes118
Size

36KB
MD5

ac7cab4e8204165e0a432fdcb2f2b4a5
SHA1

91ed9c353e9143dcfeba833ce16e154dec61885d
SHA256

7742f48861a46f402a21ceaadcf3683bd17a5e3b973441c47452105ea7e4d6f6
SHA512

cc30ccde8ab3ec79c242491259e32a32b19108026ce269ce4fb6accdf3d7e521a7d96f4d12c5c3df6ec9f83f75e27af5cc0990f2921b3deb8e4a9a45c94b9724
SSDEEP

768:mBeH66m9IvvEdvepQFXmlkAYnnA89vf29kOQMsMCNWyE:yea6m90npQFrFACX8kOfHf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac7cab4e8204165e0a432fdcb2f2b4a5_JaffaCakes118

Files

ac7cab4e8204165e0a432fdcb2f2b4a5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ