dc24cab72cca63f8227611f2243079be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc24cab72cca63f8227611f2243079be_JaffaCakes118
Size

25KB
MD5

dc24cab72cca63f8227611f2243079be
SHA1

169ac86e072349e71620487afc31c8a4fb2aa26f
SHA256

5895892c11facdc342480d536050c4f423adaced66e7918bac525e0aabea73f8
SHA512

3da427812069fbd3992d3d9a9d882ce817f3b3f7acbe4e74231e76c71c544c475310c9c32cfb95f69361ead81f64f54e71ec9cd95e279659c9561697c7981b07
SSDEEP

768:YYMWBIHZFQDaYsCA+13ZHtTes0tI/0ukF:jMWBsLVEhrTB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc24cab72cca63f8227611f2243079be_JaffaCakes118

Files

dc24cab72cca63f8227611f2243079be_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5d0da584648aa3f010e48fcbadcc9991

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

comctl32

InitCommonControlsEx

kernel32

GetProcAddress
VirtualProtect
VirtualFree
LoadLibraryA
VirtualAlloc

advapi32

QueryServiceConfigA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ