be84f2f4a7a44c54ed0268578a5ccec0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be84f2f4a7a44c54ed0268578a5ccec0_JaffaCakes118
Size

21KB
MD5

be84f2f4a7a44c54ed0268578a5ccec0
SHA1

256a4fff0eaa0deebae88e907e2515cfd6d7c3b5
SHA256

960f143aff14a8aa03deaecc53663b89ec9008bc8c3cca0ba76502e189435b1b
SHA512

b1a44681d219ca9e7969c00e539269e7d05f064a4f71a19f2b096a27e87684d2d20dc876923937c56112c52ee606a241f7b5daf44ae4aa6cf57805fd86c9b5ec
SSDEEP

192:VpZz2cXnxpu5LxRb72OWREb/74p6ldGRM1A8CmM7:VBpu5LHbiOWREb/74p6ldGRY8mM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be84f2f4a7a44c54ed0268578a5ccec0_JaffaCakes118

Files

be84f2f4a7a44c54ed0268578a5ccec0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

87bfdebdfb580c67362160d7bc589af4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateThread
DisableThreadLibraryCalls
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
Sleep
VirtualProtect

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memmove
strstr

user32

GetAsyncKeyState
MessageBeep
MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 240B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ