de3ea3c5814cb93fd2886f6132819b16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de3ea3c5814cb93fd2886f6132819b16_JaffaCakes118
Size

121KB
MD5

de3ea3c5814cb93fd2886f6132819b16
SHA1

a59d6e8c427b90b9036ab65778ff77218f754c3a
SHA256

dd0e5e83914eecaf68a847f878388dcca772b5fb7c52e9778d4e3a755d48ed02
SHA512

e15e847368e3ccff34df617e7976749dc89f9094c89a09955de767f89ddb3f2ba4754bfd337adbe8057db51412836e9b9a4d41743f222c2f3326ea7c60ca2253
SSDEEP

3072:6BKIFfgwsC/OUKIu/oFPoLUb8By0SiBPPbF:6B5fFssOUKIroIwy0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de3ea3c5814cb93fd2886f6132819b16_JaffaCakes118

Files

de3ea3c5814cb93fd2886f6132819b16_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ab2fc2448dd74e21b2ff948f50b27198

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
FindResourceA
GetModuleHandleA
GetPrivateProfileStringA
LoadLibraryA
ReadFile
SetCurrentDirectoryA
lstrcmpiA

Sections

.sforce3
Size: 25KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 91KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ