b28ad6700116013cded2c1f6565d5a38_JaffaCakes118 | Triage

Sharing

General

Target

b28ad6700116013cded2c1f6565d5a38_JaffaCakes118
Size

5KB
MD5

b28ad6700116013cded2c1f6565d5a38
SHA1

598d800cbc30228d564f14c3ac366f5217d8b9a8
SHA256

645f186ab17b33e13e068a4e433d3ed773809b46b2f67fe27b7bea6189bd3c81
SHA512

ac0a8a2a90dd888fbb23dc9f7657e3e00c76ffbe2a64837f228f0b3ad982d741c47fb9ac169f63f627d8841d0435367fe81fcd980075c3f73a365887c7940c10
SSDEEP

96:EMmyHp5FgCSIdbCh3JYOCgWIdQQZeXoTm6b9MPjKwc:RHpXgO5SiCRQEeXoa6bC7Kn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b28ad6700116013cded2c1f6565d5a38_JaffaCakes118

Files

b28ad6700116013cded2c1f6565d5a38_JaffaCakes118
.dll windows:4 windows x86 arch:x86

92299878954a049f0b165423e044caac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
memcmp
memcpy
_except_handler3

kernel32

VirtualProtect
SetUnhandledExceptionFilter
LoadLibraryA
GetProcAddress
GetTempPathA
GetStartupInfoA
CreateProcessA
Sleep
FreeLibrary
GetTempFileNameA
WriteFile
DeleteFileA
CloseHandle
CreateFileA
ReadFile
SetFilePointer
CreateProcessW
lstrcatA
GetSystemDirectoryA
GetModuleHandleA
MoveFileExA
GetModuleFileNameA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 871B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ