b7aafd73d62895ec9c11749caea9e75a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7aafd73d62895ec9c11749caea9e75a_JaffaCakes118
Size

38KB
MD5

b7aafd73d62895ec9c11749caea9e75a
SHA1

3dabc4c5e30010f8963e7a13ad6e4efc733685fd
SHA256

72c1b07da3d87dd6fed64347b4e4f32b6f1ac641aa09a60ed14506ad5f33aed8
SHA512

4bee682e8f255a38cc454ecb317693255045e852a5c22d167eb49086660a06efb0a2fd830da631fae6c813ba18e183be1943a4d9c5390413475cba286f5f04a5
SSDEEP

768:oDWvBjrWm+JMN3XiLr6g+T0HGi0FlPNRcORDPzl:oDWvBjSmYMVXyZ+QyTNpRfl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7aafd73d62895ec9c11749caea9e75a_JaffaCakes118

Files

b7aafd73d62895ec9c11749caea9e75a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9abbe0fbc34f09a471df3bce42a64ff0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
WriteConsoleInputA
GetLogicalDriveStringsW
LocalUnlock
AddConsoleAliasW
GetUserDefaultLangID
GetConsoleCommandHistoryW
CloseProfileUserMapping
IsValidLocale
HeapReAlloc
GetVDMCurrentDirectories
DnsHostnameToComputerNameA
WaitNamedPipeW
FindNextVolumeMountPointA
GlobalAddAtomW
lstrcmpiW
SetEndOfFile
HeapUnlock
Sleep
CreateEventA
PeekConsoleInputW
SetThreadPriorityBoost

Exports

Exports

Kefnnqnhn
Ikoatvya
Iflqvlyn
OpenVotxtgpu

Sections

code
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 29KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ