c7f90a53f61bfa3c0420430ca62297f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7f90a53f61bfa3c0420430ca62297f8_JaffaCakes118
Size

56KB
MD5

c7f90a53f61bfa3c0420430ca62297f8
SHA1

0757e506e94e7ac28c685f9c9ec1dcfa943ebc52
SHA256

3532856be672e400ffa7519179cded48213f94c1140070f4c4c84ff7a164e555
SHA512

c21842d097bbb0391459e77febf4f3eecbf3b6e56e5307fc346b7b8bc4dbfcbb9682abfd5e416c7f782cf68516b4e8b8e0f9f3d1376e378b76c61a2ca52f4d74
SSDEEP

768:bwGN/U3KMhpA9/ELi8uBO2B0KYGXel+lNu3ctETiuigg+uq0V:bZZMKMh+31eK6iPtETiuigrv0V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7f90a53f61bfa3c0420430ca62297f8_JaffaCakes118

Files

c7f90a53f61bfa3c0420430ca62297f8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d477960c5f95b9dba28bd87f39c89e7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ