db8d23520717d8d0028b0813a498ef72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db8d23520717d8d0028b0813a498ef72_JaffaCakes118
Size

57KB
MD5

db8d23520717d8d0028b0813a498ef72
SHA1

408143814fd3089174fb4cf5e3152a54766e81ce
SHA256

800fb608d780f9082e15723055eaf17f667af0c5f1f163b239f3077edfb3df6e
SHA512

d077ee015a8622a7b37daed4035a8570d366ba1ca68d23343473d5f2e8d2f956db5e66a651fdaeb18783a2aab0cd6598c1f8dd9b13124452ac5e80bd77ac65c1
SSDEEP

1536:c4fSwa/tsBgFSEW9zo49nkkn8N3rTqonTeS:c4Loo20mknQ3rTZT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db8d23520717d8d0028b0813a498ef72_JaffaCakes118

Files

db8d23520717d8d0028b0813a498ef72_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3343ec275f6876e4213d8d1f5a0fc7f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

KeDelayExecutionThread
IoFreeIrp
IoCreateDevice

hal

KeAcquireSpinLock
HalMakeBeep
HalProcessorIdle
KfLowerIrql

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ