ced6014ea824b17be1bc3690bdc366fd_JaffaCakes118 | Triage

Sharing

General

Target

ced6014ea824b17be1bc3690bdc366fd_JaffaCakes118
Size

26KB
MD5

ced6014ea824b17be1bc3690bdc366fd
SHA1

cf3c8f76980eefa8c9ccff69604ca2b9b451dfa3
SHA256

92ecfc970df2bbb96dc8ba71830cbbd88f8bc79a338a7879613e97b52f38774b
SHA512

92b89db043cdbebb67e9eb36c2d411af2810a26b1ef46bb24e60c4dce70d6869f84bd7112b84ae3653c9e8ddeb4a8655f1837808d92132079e9fba8cc167fa98
SSDEEP

384:w2aXe03Izp+isy+/1IhNi7p6i/cP0kIrQXT4E70UhsGKxosXtKH1MF6sV+yJRn:w2+/rySektmTD4E7RsGtsXtt4sVdJRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ced6014ea824b17be1bc3690bdc366fd_JaffaCakes118

Files

ced6014ea824b17be1bc3690bdc366fd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a7eb46f0b8e259bd470c1d75419cbd91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceLanguagesA
FlushFileBuffers
GetDateFormatA
GetPrivateProfileStringA
GetVersionExA
MapViewOfFile
RaiseException
SetCurrentDirectoryA
Sleep
VirtualAlloc
WriteFile

msvcrt

__p__fmode
free
realloc
setlocale
strspn
wcscmp
wcscpy
wcslen

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ