b2973b2f465cc19f2ea72b1da5cb5930_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2973b2f465cc19f2ea72b1da5cb5930_JaffaCakes118
Size

104KB
MD5

b2973b2f465cc19f2ea72b1da5cb5930
SHA1

92bfaef74f0c2ad6699ecd2587c172480755b14a
SHA256

4529dd2fd8f435976a9399b53d01c434d082d9bfb34bb6fe1e90aafb27f94b63
SHA512

4fa17b5a3bc3a7a570deb18963a1db040756d0000d2f97a41ef19db71d748b6aaf3e5330c5ad8e700b941871bd66ee9cfd3ea36c5b3ebe9bf9f0abd54792c7aa
SSDEEP

1536:5gpLO1hHNCL6dUua9WpLXJ4A1EzjEyEe8MpjcHzBvAR:5gpy1hHNCLVuayXJt1EzjCuihO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2973b2f465cc19f2ea72b1da5cb5930_JaffaCakes118

Files

b2973b2f465cc19f2ea72b1da5cb5930_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e78dbf52e3ba3b2321faffc5e12c47cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
GetTickCount
ReleaseMutex
GlobalAlloc
GetUserDefaultLCID
GetNamedPipeInfo
DuplicateHandle
DeviceIoControl
CreateFileMappingA
WriteFile
ReadFile
CreateFileA
DeleteFileA
HeapAlloc
GetProcessHeap
HeapFree

msvcrt

_except_handler3
memcpy

netapi32

NetUserGetInfo
NetApiBufferFree
NetServerGetInfo

version

GetFileVersionInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 890B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ