b6e063d3df41d1f426a08343d976352a_JaffaCakes118 | Triage

Sharing

General

Target

b6e063d3df41d1f426a08343d976352a_JaffaCakes118
Size

36KB
MD5

b6e063d3df41d1f426a08343d976352a
SHA1

cf3044051111f69e5ff4ca4483693c6f132e9c28
SHA256

13c252867e498130207a960967f162734d74cf08c7f5200bcd31ba7170e72d8c
SHA512

745e0d590d70ce7bff226ad65cddfeebcb3e299e4fa3fc8624f0b812d0ad6997c9e9f824d25bb7cf1f3312c047c1753bb818888cd106a2dd611f3257cc1f2e74
SSDEEP

768:uXyEfaVTTOAFiemtcmLiUdirl+gHXENj6iWnr:uYVnOA0emtcmmYirlZ3hiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6e063d3df41d1f426a08343d976352a_JaffaCakes118

Files

b6e063d3df41d1f426a08343d976352a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d2e4b629a9ed62398eda6720e5165584

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

hal

KeAcquireSpinLock
KfLowerIrql
HalMakeBeep
HalProcessorIdle

ntoskrnl.exe

IoCreateDevice
IoFreeIrp
KeUpdateRunTime

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE