dca60587d6125662734baff72dafd82d_JaffaCakes118 | Triage

Sharing

General

Target

dca60587d6125662734baff72dafd82d_JaffaCakes118
Size

25KB
MD5

dca60587d6125662734baff72dafd82d
SHA1

f8c532b25952520403e52c1256496a921193791e
SHA256

488e24d247b90ef9bf7e62506a7a0f69073fd77aa891cfb60fdae294adedd654
SHA512

c9b2474ba0bb5262bc4da07e752b2370581ebd0aeb88f982c7ec49e7d23b207f7d789d77669568cbaa1fe8e7c358a6dc84a3c0898849d129ac2cb292d22811a8
SSDEEP

384:N0WL2XpLhp725Sln3fmRIUJeFJRBBVHIV1HXHsd+HmVtgZehNlMMSj++Xm+:N0B13fMJERBNIhw+GVtUGUMSjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dca60587d6125662734baff72dafd82d_JaffaCakes118

Files

dca60587d6125662734baff72dafd82d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2afcdf6c693d1d6843df79b932794cf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
FindNextVolumeA
MapViewOfFile
WriteProfileStringA
CreateNamedPipeA
LocalCompact
Module32First
lstrlenA
FreeConsole
ReadFileScatter
CompareFileTime
lstrcatA
IsBadHugeReadPtr
DosDateTimeToFileTime
DuplicateConsoleHandle
GetCommandLineA
ExitProcess
GetStartupInfoA
CopyFileExA
WriteConsoleInputVDMA
GlobalUnWire
GetSystemTimeAsFileTime
GetConsoleWindow
CreateNamedPipeA
QueryInformationJobObject
GetBinaryType
GetExitCodeProcess
WaitCommEvent
GetTapeParameters
GetEnvironmentStringsA
GlobalUnWire
GetACP
GetConsoleDisplayMode
HeapSize

Sections

ATSEC0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ATSEC1
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ATSEC2
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ