ebcd94f4f3c91e5a14da8c191f3dba2e_JaffaCakes118 | Triage

Sharing

General

Target

ebcd94f4f3c91e5a14da8c191f3dba2e_JaffaCakes118
Size

21KB
MD5

ebcd94f4f3c91e5a14da8c191f3dba2e
SHA1

4180763724614f476d959de11a898aaaa3d9cf08
SHA256

eaf57d1a6a01e737bd5de7bf7ddeb4516d2901e2f9a189bcef725a73875579e7
SHA512

ee59397b135339c728f47eac0095def287437d81d7b31edb1fbed75915f37900a7b60862031730740b7dbd13e271b845117ddb0479d2f495cd4af326be8492b5
SSDEEP

384:BFhyVsSiWpRzyLNV1QKSffaSEmv/13LOzzpOWby8+Tv1EinjlGy:FyYeFyhzQVVMF5gTv1rnZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebcd94f4f3c91e5a14da8c191f3dba2e_JaffaCakes118

Files

ebcd94f4f3c91e5a14da8c191f3dba2e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

9a4d00436e3bdcd635f0a3f656e4a2ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
Sleep
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
lstrcatA
CreateThread

Exports

Exports

LoadGraphics
StartVM

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ