ce66412ce2266b4184b21ba2eac6e75c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce66412ce2266b4184b21ba2eac6e75c_JaffaCakes118
Size

8KB
MD5

ce66412ce2266b4184b21ba2eac6e75c
SHA1

97654952e66eac6d88a429cc44ef75c76c282b50
SHA256

d07bccc6608491c4f0a6dc61b041bbedc10c9e8b090e097f5467a7f4621a77f0
SHA512

9a9de54b5d42f3f32457e8c805419d3cd7cb217414b2b93295b70e250135df9db2deda2e85f465000d01b3f42dced2fd17bdd279ed3f2909d26de8810f8a2ab4
SSDEEP

96:maWywliXiXckULuie1wcy5N9AIM2h2izNx7Ws5FRCvc7+cLz1XB9zhfaYaFdNOtn:maWywoNkULy6ptfDZvJh/Uk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce66412ce2266b4184b21ba2eac6e75c_JaffaCakes118

Files

ce66412ce2266b4184b21ba2eac6e75c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6d0587ebaf1289c14e4ee9fc170ffd28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualProtect
VirtualAlloc
GetProcAddress
LoadLibraryA
lstrcpynA
lstrlenA
lstrcmpiA
GetModuleFileNameA
OutputDebugStringA
lstrcatA
GetSystemDirectoryA

msvcrt

fclose
??3@YAXPAX@Z
fread
??2@YAPAXI@Z
ftell
fseek
fopen
__dllonexit
_onexit

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 625B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ