afd8ff94dc96d28c4351976f3723d6ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afd8ff94dc96d28c4351976f3723d6ed_JaffaCakes118
Size

101KB
MD5

afd8ff94dc96d28c4351976f3723d6ed
SHA1

bc62104cc1dc58420342895995395cb93bd55276
SHA256

027b0a910d35e64557147bde0402635177ce488045b5b5537761eaa417bdb28d
SHA512

f131b78c946b0981abe4fbeab6a3cca021877a9ba765a797710877318cd146d53887238cb3334d9c2adcb214394d804110e9feda9d88e0c1410785d24fc14361
SSDEEP

3072:mgUCTEnuOUqcM98ilwSsGnbtxzxmWDJm6MWZbG:mghESqb99l3sGbtxFZm0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afd8ff94dc96d28c4351976f3723d6ed_JaffaCakes118

Files

afd8ff94dc96d28c4351976f3723d6ed_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 184KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ