d13719e6120e96fdd45298da850ba20e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d13719e6120e96fdd45298da850ba20e_JaffaCakes118
Size

57KB
MD5

d13719e6120e96fdd45298da850ba20e
SHA1

293d2905a0714fa1637107f8d310a47337d70bac
SHA256

d3d8e419cfec479177ed1d7673955edfd74446373a14045d51f9be1e9c3faa67
SHA512

280c787938d7f1b779850e1bc83e5967a3d34570a1da70fc583ba273dc4c83ec0a4df010f316fe28574e111f43946b9f6ef98d5a84a8453f6d7dc73bb197dd37
SSDEEP

1536:hiKb7QWDjAsWiLdN8wwMC5DYJlMd85fpzH/KnSzsUF:0KfQuAsJLdNPwV5Dwlc85fFyA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d13719e6120e96fdd45298da850ba20e_JaffaCakes118

Files

d13719e6120e96fdd45298da850ba20e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3343ec275f6876e4213d8d1f5a0fc7f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

KeDelayExecutionThread
IoFreeIrp
IoCreateDevice

hal

KeAcquireSpinLock
HalMakeBeep
HalProcessorIdle
KfLowerIrql

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE