b29331b8284d5f423698bbef6502f8a6_JaffaCakes118 | Triage

Sharing

General

Target

b29331b8284d5f423698bbef6502f8a6_JaffaCakes118
Size

44KB
MD5

b29331b8284d5f423698bbef6502f8a6
SHA1

3c77f1a1c194b3edf4cee3b2c750d7cdf04c0b38
SHA256

3049f7453ac26197400bf88019a5ec6264a759cbcb97490d98788ed9c642fce9
SHA512

bee085ef169046bef8a2e17c5c3a9e86c9144c5721ac518ba77eb1fc462eff0fc8f97abba2eaceb592755eead70526bea12b86473e1540f2a3fca353fb517c79
SSDEEP

768:ayEM7A6JAkEyLf1dOOpSeFa5JL9kOMtoMA:aA7AQA5CD0JiOeA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b29331b8284d5f423698bbef6502f8a6_JaffaCakes118

Files

b29331b8284d5f423698bbef6502f8a6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

404cd78c7338cd6369b954014b2d4f22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtect
ExitProcess

user32

CloseWindow
BringWindowToTop

Exports

Exports

Gfrorsip
EndTnuerijbglb
SetSceidebcu
ReadFfkhcivvxn

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sec2
Size: 1B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ