ba8b411d5c3c18ed303e8ad9b948c9db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba8b411d5c3c18ed303e8ad9b948c9db_JaffaCakes118
Size

28KB
MD5

ba8b411d5c3c18ed303e8ad9b948c9db
SHA1

4510a7710ba75456f5424de30493b11a517491ad
SHA256

95cc2fd9fb1b34e770147f488d8b4032d529830c72ab68a20fe266a91bc19d09
SHA512

f0c9ceba02e9486b3bde7826404c4f808f30261290ce5b904f569973daf024203fe7505ae5dab6d11cdc32590049f4bc2dc4f48a80710adbefa72ea9f2f3eac5
SSDEEP

384:xRtElTnwFgMOKG/VsPuMXWWitIwsdh6+7U/nuvWg9vIpKus:xglMCKWMXWWitA+nuvh9qts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba8b411d5c3c18ed303e8ad9b948c9db_JaffaCakes118

Files

ba8b411d5c3c18ed303e8ad9b948c9db_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c0d3d2d3a357e37d5ed1dcbbb552ac5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetSystemInfo
GetProcAddress
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ