df87816f18aefd5971ea40b797ccad3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df87816f18aefd5971ea40b797ccad3a_JaffaCakes118
Size

80KB
MD5

df87816f18aefd5971ea40b797ccad3a
SHA1

9942eec8ad28c8d4d6dd5540cb7c6019227ed268
SHA256

ff41ac87547797c716d3f2a79cfb0e0de7d3ccd694a9f216bf3526cead53efca
SHA512

7cd3fbed7f214b3d1b317dbd05c6734d6b14b722bcad04e1873d861ba80bca5f0e5b2af84c35756c934b37c8777dae9f8fb1677cc3a328516c3db4dae76a1745
SSDEEP

1536:I0hVVC2FKe6Kan4bLr5RhroaPAgdxe2peFYgcDrg3n0asIarS:nzVrFK63XGaocoigcfg30aT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df87816f18aefd5971ea40b797ccad3a_JaffaCakes118

Files

df87816f18aefd5971ea40b797ccad3a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ab2fc2448dd74e21b2ff948f50b27198

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
FindResourceA
GetModuleHandleA
GetPrivateProfileStringA
LoadLibraryA
ReadFile
SetCurrentDirectoryA
lstrcmpiA

Sections

.sforce3
Size: 23KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ