ea5bad4ffa82080945de5cd3a2ccd4a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5bad4ffa82080945de5cd3a2ccd4a1_JaffaCakes118
Size

25KB
MD5

ea5bad4ffa82080945de5cd3a2ccd4a1
SHA1

53ad41284cb28c3c1070d3af19a07df02bf117c8
SHA256

ac185fc4941ea1c69d38fd53428690537dc9d05aafe42fd01d0de83beeb9915b
SHA512

c141ae8769856f1782d35f2bc6fb034d8ecb8fc5e208c9f8cb7c72b372810714782ef51fe18022b78ecbe8d2167ac0d6f23eb85a8240296c92c6acb70a816d93
SSDEEP

192:MzSmqOAE/r5tivF1+K95LyRb6kPR7rO0rVtz3h5pdpsPn38X1vmCfM7:paQP+45LQbLZrVtzx5pdpsPn38FdfM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea5bad4ffa82080945de5cd3a2ccd4a1_JaffaCakes118

Files

ea5bad4ffa82080945de5cd3a2ccd4a1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b39512faf34670bdfdde782f76d63789

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateThread
DisableThreadLibraryCalls
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
IsBadWritePtr
Sleep
VirtualProtect

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memmove
strstr
system

user32

GetAsyncKeyState
MessageBeep
MessageBoxA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ