c1a172928be8042bc13ddc267f609c9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1a172928be8042bc13ddc267f609c9b_JaffaCakes118
Size

84KB
MD5

c1a172928be8042bc13ddc267f609c9b
SHA1

e4ad35977812f17278513653c75049ca0b8060a3
SHA256

13bcd5db2ec0b6ccc5f7aac64daa960b99ff81add00de1fd316a3dbeb969ad5c
SHA512

74688129893cf5559472c3978095bd62870108f929697145799005100934c7f05d4f617445969cefe114464e9da285e351e4f8ed4430179a8d4e5edae48b3dd8
SSDEEP

1536:l7fpgvD1pSELWS6/ULBRMkx+WNmMMLfaOysoIKvBL:lr6bHSELWH/U/MPWNkuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1a172928be8042bc13ddc267f609c9b_JaffaCakes118

Files

c1a172928be8042bc13ddc267f609c9b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

99fd9c7a72069d5eda043a725c1170a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ