c909ec7bbc6c7310e7a376ae6462f56b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c909ec7bbc6c7310e7a376ae6462f56b_JaffaCakes118
Size

60KB
MD5

c909ec7bbc6c7310e7a376ae6462f56b
SHA1

f83ee5ee8d466e3247be71837ac7e9901bea4033
SHA256

1a4ab2510e6faab4940a8824a299940007505f319c69345995e44c263ef39b8b
SHA512

bd72a5111503d6b9bb715f107cf5c16fea973f7ab0304f108d17accb10fb308e6b97186612902f7188a24820107c2526f082d0e71c309f13c96a49f001d88814
SSDEEP

768:SJnbDIF9setRopp6ithdtWhE806gCUVZwIjN3n6pVDiBAXzwY:MnbDS9Rupb7dtWhD0TTt6pJ3XM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c909ec7bbc6c7310e7a376ae6462f56b_JaffaCakes118

Files

c909ec7bbc6c7310e7a376ae6462f56b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3aa63ed5b39a521c01dd2724a79f5fc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
Beep
HeapAlloc
GetProcessHeap
HeapFree
CreateTapePartition
SetEndOfFile
CreateFileA

Exports

Exports

mtpa

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ