aec04b802bc4151c48889046b2e426c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aec04b802bc4151c48889046b2e426c2_JaffaCakes118
Size

100KB
MD5

aec04b802bc4151c48889046b2e426c2
SHA1

7d7fe372121a93c79fc5703f853625209f04cfbb
SHA256

d10242e12b49f974f303f58cb05e7019eb54d46c4fab3eb6b6ba7c851b802293
SHA512

181dc5015ce3b8a5ce3c0e1fddb6497443d6a211a3cd7c49ca5456857bbd0834f82d1e90786012b3f5a4b22811eb17fb1574ab76548a56111b2ed617e4b82e7d
SSDEEP

1536:MZ7Y6JZkADHN9sW98qGiicp6ZPjtMdA6Cb7QaX1VTTMTO5ivbaVb6WxlMT/SJgrj:v63Jbs8l7pcjctCfQaX11fOKCean9p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aec04b802bc4151c48889046b2e426c2_JaffaCakes118

Files

aec04b802bc4151c48889046b2e426c2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3e3c850c7523d6cbbd552b551fa2a12b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceTypesA
ExitProcess
FlushFileBuffers
FreeResource
GetFileSize
InitializeCriticalSection
MapViewOfFile
TlsFree

Sections

.text
Size: 24KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ