dac143bfd328fd7afe87c2fb2fc66668_JaffaCakes118 | Triage

Sharing

General

Target

dac143bfd328fd7afe87c2fb2fc66668_JaffaCakes118
Size

23KB
MD5

dac143bfd328fd7afe87c2fb2fc66668
SHA1

5e9ff7c7c8f260770bb5e03d636263dbf67ef140
SHA256

bc89cc68327228d2171cb09b433b913bb2303f67589055f26dfb825d8b486107
SHA512

a85b41f624a0236385983cf36e7cf22ae3f61396b46f57929850369b7286c8e450d7e362b187897b3dcd874f610bdd71e95d6e965932e75cc22d39de13da00de
SSDEEP

384:6W4G4WYR8HoW3SQeFscVXpnh5g0RtAfIf3qPYT6Fir/r050gi0t1:6W4G7H43VXrl8Qf3E+6Mr/rLk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dac143bfd328fd7afe87c2fb2fc66668_JaffaCakes118

Files

dac143bfd328fd7afe87c2fb2fc66668_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0ec149ae06ed92a3499d5d5adb2443fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
free
malloc
_initterm

rdrlib

_qwe@8

kernel32

CreateMutexA
OpenMutexA
CloseHandle
CreateThread
GetSystemDirectoryA

user32

GetMessageA
TranslateMessage
DispatchMessageA

Exports

Exports

_DllMain@12
load

Sections

.text
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 581B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ