e1ea7c8040cd48e17fd6e493d575f1fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1ea7c8040cd48e17fd6e493d575f1fd_JaffaCakes118
Size

35KB
MD5

e1ea7c8040cd48e17fd6e493d575f1fd
SHA1

fcb5b8288d3135157c4fde3695b1d59dd9a12747
SHA256

631f4f9919e831127dd94b078ee9d16e990131b5f5595d1b56315d617f24182c
SHA512

71070fd8c9c2eb686ff19f5edf8ce57f78a710fc3df330daecbcf8dbb83e115f5109b039a7d085d50a387ab618560890301ebc6876b95a07d4eb83a8eb6685b3
SSDEEP

768:F7r4HVUdXQEmccVUVjLXZQEzvepAaur5t23sMh2+3VzqEx8aUZqXYJtLHXR:d2ValcWVf3ve6Pe3sWl3L8aU5tLHX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1ea7c8040cd48e17fd6e493d575f1fd_JaffaCakes118

Files

e1ea7c8040cd48e17fd6e493d575f1fd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a5ebe4c9daed753c056196a7a750fe77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hal

HalMakeBeep
KeAcquireSpinLock
KfLowerIrql
HalProcessorIdle

ntoskrnl.exe

ZwCreateFile
ZwOpenFile
ZwClose

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ