b95c13aabac9fa698c8a9090d2837fb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b95c13aabac9fa698c8a9090d2837fb1_JaffaCakes118
Size

48KB
MD5

b95c13aabac9fa698c8a9090d2837fb1
SHA1

294b734006a404a2043c989ab22c08b8cee05a1a
SHA256

123813e9aa6b70cd36211cf751f0849fcc29234203225c7b5c045e0d777f611c
SHA512

b79c0bf301e08fdb2a41c16ce7c59527722d241a2e0ee3875a9f3704d7261b86ae5c10e5e4ceadf97660fea8196deb6a652be41b1def44044e8a3da264ede3e3
SSDEEP

768:v7Ca9WZIpjoyj4XERIH4NRJPcr8w80pxryBuXo97:vF9V3Cut4pxGco

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b95c13aabac9fa698c8a9090d2837fb1_JaffaCakes118

Files

b95c13aabac9fa698c8a9090d2837fb1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

de0f158ff7a015d065cebccb1ce0b29a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
LoadResource
QueryPerformanceCounter
GetSystemTimeAsFileTime
CloseHandle
GetStdHandle
GetLastError
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Exports

Exports

attempPS

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ