c83655d09f601693f1d18a9d6bc6707b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c83655d09f601693f1d18a9d6bc6707b_JaffaCakes118
Size

17KB
MD5

c83655d09f601693f1d18a9d6bc6707b
SHA1

c63ef553f8720dd6ca2760ac0b256db81cfb07a1
SHA256

7bdd6e0e57e9682d1781f61dc35e2b2699ae25b2d4df9260d83e8a63e69b3fae
SHA512

06b16d574022dfb1583685c84e01d8c4cef0d3ba42444720c3068f5122b827d7ac8165c3fa88309a13a6631f2311a8cfd9cb38cf8b636d0f9fce960c3d5facc5
SSDEEP

384:ar1RhCLtQpn4r8owSG3dBk1Z5GMbqkwz:8wJQpn4YMG8fGM+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c83655d09f601693f1d18a9d6bc6707b_JaffaCakes118

Files

c83655d09f601693f1d18a9d6bc6707b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1794003c480f5a71b6470a8f60a8c5b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualProtect

user32

FindWindowA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ