bbfa3f26625552ac4c3408b3e8a2c99c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbfa3f26625552ac4c3408b3e8a2c99c_JaffaCakes118
Size

3KB
MD5

bbfa3f26625552ac4c3408b3e8a2c99c
SHA1

64230fb19635faaf16fab0e945705385551fd624
SHA256

61d09f3cf5750a2a3b93d644696333f0d4a4cd161822aecf58ba70c1cb3fbe74
SHA512

c022206ee8569c5f2106951d7347510745af42e0d8e42603064cd09ef4909a49e4667300c92a5f1816389bd2ca614c5ebcac7507dbc58d861d9c7ce1c105cd8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbfa3f26625552ac4c3408b3e8a2c99c_JaffaCakes118

Files

bbfa3f26625552ac4c3408b3e8a2c99c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

805d77ebf6e2842ae8cc8d2cbb1f6dc0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
GetLastError
FindClose

Exports

Exports

Execute
GetModInfo
Install

Sections

.text
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE