d6684cf11b7f6bc4be6633b2d336aa75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6684cf11b7f6bc4be6633b2d336aa75_JaffaCakes118
Size

88KB
MD5

d6684cf11b7f6bc4be6633b2d336aa75
SHA1

a88e422fb57fc0b20c54b4492b8ac28fa5906305
SHA256

2c5731c5342dfd81c95a17330a6f807d62ba82332e8bdb9634794515a05fbf4e
SHA512

5ef6eccac7336be41d511297ebd84adec9bf5924e655756eb9209817b288a24bf003f3e7d9a895b9cae2c098418b638c6fc9aba7f54ee336130baa95025eea31
SSDEEP

1536:xrvxdoewqB93Y2WljsW8RTjYV7lqS/N8AKvjo6F0xwImcRdd:xrvDoewqB93Y2WeFvYvziK7KI7rd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6684cf11b7f6bc4be6633b2d336aa75_JaffaCakes118

Files

d6684cf11b7f6bc4be6633b2d336aa75_JaffaCakes118
.dll windows:4 windows x86 arch:x86

29bd57e88ac0e7afb9b957437c93ae27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetConsoleKeyShortcuts
GetConsoleAliasesA
GetVersionExA
SetWaitableTimer
InterlockedExchange
SetEndOfFile
DisconnectNamedPipe
VDMOperationStarted
ReadFileEx
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.at2sec0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.at2sec1
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.at2sec2
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.at2sec3
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ