d148679efd52eddec1c8ad37a2efa849_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d148679efd52eddec1c8ad37a2efa849_JaffaCakes118
Size

160KB
MD5

d148679efd52eddec1c8ad37a2efa849
SHA1

1505d11b6c08ea393e64a80cad318488cfdf40ac
SHA256

5651ae1c416daef14ccec3a07c9fa7d164339e89ef9f548facf030f6fb0922e6
SHA512

3764f06b4b4d7e9a099a0a0d19a1c0cf2bb734bb5653310d497d9be28c24bd6eeb7341d971db594988c3bab3254eed8bd105b3ccbfaba96999aebe9fdadd0c43
SSDEEP

3072:9vIhMyN3eJtFZqWQEkfUtSPSgp1zQlexElqUXrzYKN:9vIeyUJtfHlSsISgp1zQlexEFrzVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d148679efd52eddec1c8ad37a2efa849_JaffaCakes118

Files

d148679efd52eddec1c8ad37a2efa849_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fc94aa26b40cb451e108065536adb7f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
GetProcAddress
LoadLibraryA

advapi32

RegDeleteKeyA

Exports

Exports

Bthapi32

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ