ae67e503361e205213e16c0368ad5d57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae67e503361e205213e16c0368ad5d57_JaffaCakes118
Size

57KB
MD5

ae67e503361e205213e16c0368ad5d57
SHA1

1e6f864644919261c8e954a259fcfbd0f0a3a3ee
SHA256

f5bd2aff4877cb87b933281a9613e36f8105f6d7f5c927afc952040c5cf98dd7
SHA512

7b5a0a89d06a46a8ac2ecadb9760ba490ddd09467c732c73ff9f8a76376c8c0174bfd39dc39fe165c387d1e185075e477247888a67b062d2f3c671bc79b7b64b
SSDEEP

1536:cnly+SU9Gl4Om+fhVqOuPpvchXfSPNdFb0ZiI51F:clyaMle+fu7mlon9Iio

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae67e503361e205213e16c0368ad5d57_JaffaCakes118

Files

ae67e503361e205213e16c0368ad5d57_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3343ec275f6876e4213d8d1f5a0fc7f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

KeDelayExecutionThread
IoFreeIrp
IoCreateDevice

hal

KeAcquireSpinLock
HalMakeBeep
HalProcessorIdle
KfLowerIrql

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE