d657bcf4edb65cc7a7064973682cc5a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d657bcf4edb65cc7a7064973682cc5a6_JaffaCakes118
Size

14KB
MD5

d657bcf4edb65cc7a7064973682cc5a6
SHA1

fd4d7f48161ca05f956785552fa9807e50db9148
SHA256

78e6c2adead8c1b09205e40e4070791061b0dd5babdea49bef9843af5003277b
SHA512

51234fa46a7f078fed54cf71e9a3338ff1557a7edda4c0523abc73286513106eba71e019672d8c50d79828479fa6562fefdb2786104dd5b46bc1831062cc0750
SSDEEP

384:p4wxSGAzwXiznkIVoKojx3WknIbpJkPxf:nxmyZ3xmd3kP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d657bcf4edb65cc7a7064973682cc5a6_JaffaCakes118

Files

d657bcf4edb65cc7a7064973682cc5a6_JaffaCakes118
.dll windows:5 windows x86 arch:x86

85e5e6dedf610ccc3213239370be27cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
SetFilePointer
MoveFileExA
HeapAlloc
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
WriteFile
Sleep
CreateProcessA
ReadFile
FindFirstFileA
GetLastError
FindClose
MoveFileA
CloseHandle
GetVersion
DeleteFileA

Exports

Exports

_Data@0

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ