b568fdd99426de0085f01495954e5f01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b568fdd99426de0085f01495954e5f01_JaffaCakes118
Size

12KB
MD5

b568fdd99426de0085f01495954e5f01
SHA1

bdedd45737622a06fe58e858ebbb0700d068d76c
SHA256

e4b22e05597a5bb1e19aa1ee1ee5145d3bd22fc5c616be0754cb1bff9d3fef63
SHA512

e8670531d897ddac9a15ae7b6823e9b4a1588a086cbc340fc66f91b67ea10efcd06b8e3f3e073353aac4c742c174003441dd3bef2d6fd6ea9c7bfbb90de1874d
SSDEEP

192:1sccYe0KuU65CdmA8OLTkFQC0zPCWa5p0bKSdTs88Lna/zU:ZcYe0KuU6AcOLcWafy3mna

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b568fdd99426de0085f01495954e5f01_JaffaCakes118

Files

b568fdd99426de0085f01495954e5f01_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d2263bda339bbb1fc433ae1448185f98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

strcat
strlen

kernel32

Sleep
CreateProcessA
VirtualAllocEx
WriteFile
CreateFileA
GetWindowsDirectoryA
WriteProcessMemory
CreateRemoteThread
CloseHandle

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ