b24bb6b5486b875e7c262864706d4a57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b24bb6b5486b875e7c262864706d4a57_JaffaCakes118
Size

40KB
MD5

b24bb6b5486b875e7c262864706d4a57
SHA1

381739ff5da99faa49ca2034d711393cb8646a1e
SHA256

8d7ddb43a232dd24dc4b60418e063e8e888c971f5febdd33831f7070860eabb1
SHA512

34ca965c680a838fe0dd96e4adcf483de27c9c0a2e6511720740b4a2340abb890b6603b1da989d7ee3f1010fa8b393179ba634a466b762ee07dce04d440beec3
SSDEEP

768:A4UrlYMoxRN0NsEJorGPxlugZDgIm76LYYh9cRVq3Hk6U:A4UrlY1EROiPVmIm76MU9cPq3Hw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b24bb6b5486b875e7c262864706d4a57_JaffaCakes118

Files

b24bb6b5486b875e7c262864706d4a57_JaffaCakes118
.dll windows:5 windows x86 arch:x86

42fb9692a824e417416408cd022b278d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindAtomA
GetModuleHandleA
GetProcAddress

user32

GetDesktopWindow

advapi32

RegQueryValueA

Exports

Exports

hgdsdhtde
kcrnvvhw

Sections

.text
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 361B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ