cfecb7c621585d24b243bda36d09d59c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfecb7c621585d24b243bda36d09d59c_JaffaCakes118
Size

38KB
MD5

cfecb7c621585d24b243bda36d09d59c
SHA1

9b8adfee0b5862b60d479484769eecb35ea3aec0
SHA256

f6964cfc14a366ceb5113bb927f687457f7853fa4de77b6c772e0535a73a5407
SHA512

2227b53453b6a57947f3c7c7bfe028998cd872843b3ada35976b02a3fbf2e0d560d692f8247449c46c858f2c8dbcd316f6d20ef1afe58ea67c6984fa576428f4
SSDEEP

768:AhQTs7P05dAWRR0WvUKHwk9Rpd2WNRDR3PPnFA7b716:AhQTg0YRqUK9RyWN3n67bc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfecb7c621585d24b243bda36d09d59c_JaffaCakes118

Files

cfecb7c621585d24b243bda36d09d59c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 72KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ