c22606a653c1f72170ef98706eaf60cd_JaffaCakes118 | Triage

Sharing

General

Target

c22606a653c1f72170ef98706eaf60cd_JaffaCakes118
Size

17KB
MD5

c22606a653c1f72170ef98706eaf60cd
SHA1

9b28c959d1b227e8e0d38288e2e63335cfe71092
SHA256

a1291ee08a9776f6622fba15bff0fe8ba22ccb53a5a53dffd4e29772498f5495
SHA512

fb16898a27352ff6d1db96e38b320f3157ac8b1fce2559f11aedd0e90b6e856284badf3cfeb56dc41ede5e547db09a04a95d39bceac928c09ab548026a16ef68
SSDEEP

384:bUo/w/F0YzWsrWDZM8apZFo/HUVkHdQaOlwK/ws:bU3/WYSs48ZF2HUGYLH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c22606a653c1f72170ef98706eaf60cd_JaffaCakes118

Files

c22606a653c1f72170ef98706eaf60cd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8cfb5639a044d231d1b5be8bc2f596cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
FindNextFileA
FindFirstFileA
FindClose
IsBadReadPtr
VirtualFree
VirtualAlloc
GetProcessHeap
GetCommandLineA

user32

wsprintfA
MessageBoxA

Exports

Exports

Init
MY_DLL_MAIN
TjScan

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 518B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 555B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 372B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

irrPH
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1WE4M
Size: 98B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE