d6796be8d5da0622703fb8bd2652187d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6796be8d5da0622703fb8bd2652187d_JaffaCakes118
Size

118KB
MD5

d6796be8d5da0622703fb8bd2652187d
SHA1

33c5bea85aa102380394ad53672cc4be6e8b4e40
SHA256

8b897620b7e40c2cc96147ca8e74f6c9e0b278516d3a2fe119d950bda4e209e0
SHA512

9f694e94f16d98b9cfab8fda93f8ffaee975359af95d0594c2fde7910054edaf44565622e2216d5a13e04f77cbe93a94b584380db98ba2abd4b32af1cc123635
SSDEEP

3072:uZ2rPMwHKqWwPCerlsLyecs3y6mFgZp9a6UgP:ucrpqoMlc7gHomP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6796be8d5da0622703fb8bd2652187d_JaffaCakes118

Files

d6796be8d5da0622703fb8bd2652187d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

68ede98bf8a3232c4d19b62936c60555

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
ExitProcess
FreeResource
GetPrivateProfileStringA
GetSystemTimeAsFileTime
LoadLibraryA
RtlUnwind
lstrcatA

Sections

.sforce3
Size: 24KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ