adb25a71c723ff8c11b1a6b908de73c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adb25a71c723ff8c11b1a6b908de73c6_JaffaCakes118
Size

104KB
MD5

adb25a71c723ff8c11b1a6b908de73c6
SHA1

54de8ad7de3d19f338e001ec5cfa17e5bdb5e20a
SHA256

f21dad556527d26f438bca9eb25375a68a616f934236b0e8a734b995019c0b5b
SHA512

2d58a95627ff39646c167df0ed7913191c508a7be596d68759e8fa50ef72562f5bef3f3734e4482bc048a35e04e942fc4c0c30ff61aa42a7f11f84e2940c5272
SSDEEP

1536:x5TYYFsnQMB4udRv2gBvSTA1vTV7gLvBL2rG4sB5L1a4vikSe0nL5UJGqZX5a:x5TlaR60vF8ofsB5L9aze0L5UJGqZp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adb25a71c723ff8c11b1a6b908de73c6_JaffaCakes118

Files

adb25a71c723ff8c11b1a6b908de73c6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

68ede98bf8a3232c4d19b62936c60555

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
ExitProcess
FreeResource
GetPrivateProfileStringA
GetSystemTimeAsFileTime
LoadLibraryA
RtlUnwind
lstrcatA

Sections

.sforce3
Size: 26KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ