b5e904cecaa4b6e323a01d0a6722b32b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5e904cecaa4b6e323a01d0a6722b32b_JaffaCakes118
Size

5KB
MD5

b5e904cecaa4b6e323a01d0a6722b32b
SHA1

930cdd7eb6241e51d71a67e79f615c2bdbf7f0ff
SHA256

2e1ff0f3c08bc8d5322483e70e336173d277558522cba906e7be4509d0e4d52b
SHA512

350ebd6604e194ce7eced85ff87aebbdc593d437c338b8dbc7ab350f4259c4d7fecee8ee569098c13448389cb409fa9e96d61cf27cd28d273f68a7ec46332b3d
SSDEEP

96:S0EL9FhaVcPNaZykibpIQzRCAp1227FXjIbD72pPl:UHhVMYkkVPgc0b2pPl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5e904cecaa4b6e323a01d0a6722b32b_JaffaCakes118

Files

b5e904cecaa4b6e323a01d0a6722b32b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c78b7817a93456f666ddb8cc6c445b1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
CreateThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
lstrlenA

Exports

Exports

SomeFunction
SomeFunction1

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ