c2a7726f7ab8323b67e1e37e76601726_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2a7726f7ab8323b67e1e37e76601726_JaffaCakes118
Size

270KB
MD5

c2a7726f7ab8323b67e1e37e76601726
SHA1

d9714c54d68b117765d0e6540fb538ac616b9008
SHA256

020a8fcdc7a9318eab1d85e52dab7e2092647bf86aa6c620f2f4826e3069c6d6
SHA512

81f77c9f55e1bdd2e01fa4f133aae26895a894ca3b61fd9c323e4ba82759ae9925b2d411a87e3a47cc42e5bc65ed54543f35f7ca89ddf146ddc28d491b9b868d
SSDEEP

6144:fhGqYfzdnK22EWU9Ovvg55w4V4dMrubjyl4k00sDtz5W7xLYHJQ:JGVW0we5w4A/jyl4k0JFWFCJQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2a7726f7ab8323b67e1e37e76601726_JaffaCakes118

Files

c2a7726f7ab8323b67e1e37e76601726_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9a5b7a6d26cab3086fdf0a99839d0078

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
ExitProcess
FlushFileBuffers
GetDateFormatA
GetFileSize
GetSystemTime
GetSystemTimeAsFileTime
TlsAlloc
lstrcmpA
lstrcpyA

Sections

.text
Size: 22KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ