b3d96bc7bdbd08f86a291e891ea71df7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3d96bc7bdbd08f86a291e891ea71df7_JaffaCakes118
Size

44KB
MD5

b3d96bc7bdbd08f86a291e891ea71df7
SHA1

db3a6218dd743d119e255126f2e5ebaf1c3f62ad
SHA256

c801f3fbbb28b689657263619b426b32248ef112ee170a5a1a41625bab1523a5
SHA512

6e45d97b07fe7856800ba0fd1626aa873fa2f211f0209d7de2602db04907aaf363b2ea910e1ef079e580be32a236e8d0b1b44d070fee71a268657af1a2f1dbac
SSDEEP

768:zEsWg8F9QNZX0GvuhSnZ6ttEre9cTnjGa3yMuoIfopzZYiCG1voN0:Isd8zcZISZfrA4n6a3yXw4UVE0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3d96bc7bdbd08f86a291e891ea71df7_JaffaCakes118

Files

b3d96bc7bdbd08f86a291e891ea71df7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

146b299dff606deccb96055e258639c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect

msvcrt

_except_handler3
free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ