dd206cf9bc306e945c1182731cff7b89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd206cf9bc306e945c1182731cff7b89_JaffaCakes118
Size

76KB
MD5

dd206cf9bc306e945c1182731cff7b89
SHA1

8d591eb3b8dfbf865374680fd6e588f3513b779f
SHA256

0110bbbf1eb1b4290aab8d3900563063a9e7593288c7afc145a05a8534113d82
SHA512

13a93d5e2e17f8924296074d9a59dbbd82cf20a7a25066230169e1b1eaf32b8aabebce9cf0e272ad226d36c6818ede6b9fb84eb55ce9e2aa9eb07263340a6996
SSDEEP

1536:KPS1IXN1K4PrK23MzSpcVV4q9FZ0+aEgMm:FI911GSMepc+uZPaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd206cf9bc306e945c1182731cff7b89_JaffaCakes118

Files

dd206cf9bc306e945c1182731cff7b89_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bdb5c2080e5820b283d956bde2cff43a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
GetTickCount
GetStartupInfoA

rpcrt4

RpcEpRegisterW
RpcServerListen
RpcEpUnregister

Exports

Exports

_WAMVGXDQ@0

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ