bccadb417b7f5a0dccece26d012b3f6a_JaffaCakes118 | Triage

Sharing

General

Target

bccadb417b7f5a0dccece26d012b3f6a_JaffaCakes118
Size

7KB
MD5

bccadb417b7f5a0dccece26d012b3f6a
SHA1

5f62711353306bebb6738bdfba12d7094739e4ce
SHA256

34cc9a4528212129bc966d053964f0e89110a89f93118a65a2495a46fde72e48
SHA512

8d3d146c8e9f519a2318961e33fef44d3f093273ece8d91247ffdf99db4ff04f265719dab3a57334e81a515f23c3f525c10f486c4f5aa8de8355cabfa58608e9
SSDEEP

192:Nbb+Xm3DFRWIzhp/HzPdYLs8aOZQat+09c:Nbgwtp8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bccadb417b7f5a0dccece26d012b3f6a_JaffaCakes118

Files

bccadb417b7f5a0dccece26d012b3f6a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fa0f70e1d259224f0aaa9c99768978e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

memset
RtlUnwind

kernel32

GetProcAddress
Module32First
Module32Next
CreateToolhelp32Snapshot
TerminateThread
ExitThread
GetCurrentThreadId
SetEvent
CloseHandle
SleepEx
CreateThread
GetModuleHandleA
HeapFree
HeapAlloc
GetProcessHeap
OpenThread
Thread32Next
Thread32First

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ