bdabd861223fc312b4398fbd2081fa6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdabd861223fc312b4398fbd2081fa6c_JaffaCakes118
Size

92KB
MD5

bdabd861223fc312b4398fbd2081fa6c
SHA1

ad15b07b33ce27c99c4385270e757f871ebe9208
SHA256

3b14ae2d545cf7f69f3164b25f6ff7e23d9f8352ddfceb2180743cc36f0589c3
SHA512

ffaf8c9dce335e99e0427653fb2d63a218bfc505bdb479c3fb07e5adda33f65edf4791bb142546b701588e76f7a1e14a8ace5df2d950509b8a3f4725c067039a
SSDEEP

1536:denp5m8NZJ+6NjL32eh3J4aX52Zt7U/W8+yNYD4uG5a6edcZEc2CTObXxTK:oPrLFVL32eh3J4W52Zt7U/T+5ftcCcC8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdabd861223fc312b4398fbd2081fa6c_JaffaCakes118

Files

bdabd861223fc312b4398fbd2081fa6c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dc0a2a5c77d4e208fd315e9bf59cf11a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
RaiseException
SetEndOfFile
TlsAlloc
lstrcmpiA
CloseHandle

Sections

.text
Size: 25KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ