c0ee34b8c9d7544475506d352f67e5d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0ee34b8c9d7544475506d352f67e5d3_JaffaCakes118
Size

174KB
MD5

c0ee34b8c9d7544475506d352f67e5d3
SHA1

b260164530094ad965c14f3ca72f3858f9c434c0
SHA256

7d4893b0e1a92dc0f8c4127a7b9a8cfe602b888b8fdc92cc2fd2b63d4b7d38d8
SHA512

9f4d8b8621848438505a903a580a760421602915e49ac6fc736d0474fdb9bd09c2ac3a9b11ab475986d1d00715d26b833f3a42daa9bda10243e552f397072152
SSDEEP

1536:91moQj+PGsGxPe7iGZQAbPVkbMeWCkglT/BpnayY896GWdLkAWWZz5f/lGuDXsRs:jmoQjEiGZZLgJnG8dWxlbsqsRFWH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0ee34b8c9d7544475506d352f67e5d3_JaffaCakes118

Files

c0ee34b8c9d7544475506d352f67e5d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c6ce08f606b877dc5926bfa2be921535

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
InitializeCriticalSection
LoadLibraryA
MapViewOfFile
OpenFileMappingA
RtlUnwind
SetLastError
TlsAlloc
lstrcmpiA
lstrcpynA
lstrlenA

user32

MessageBeep
EndPaint
DrawMenuBar
CreateCursor

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA

Exports

Exports

Bcmqbwlb
Llreutiaed
Tdikb

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ