ef78b1cbdd846b62803af81a8423c149_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef78b1cbdd846b62803af81a8423c149_JaffaCakes118
Size

82KB
MD5

ef78b1cbdd846b62803af81a8423c149
SHA1

3cc080eb8292f7cd9e2cbc13c4561876f44c7123
SHA256

4256df6715e286b5e931fe931194aba6152da12a94a7f2fe653dbfb7bfdce411
SHA512

80a4775c0c2fbc4190721e883e9546d7a7266db6d093522d0b20945ef1715272b4764e624fe773ba8c70a717e979fb4d3a692cf8f518227eb7af6c221dbc3b22
SSDEEP

1536:cRO88aYoEh/oq5TUTOtW61B65c+wfhjgSecUEoBFuW50:c7QUhOt+wZg8UEdW5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef78b1cbdd846b62803af81a8423c149_JaffaCakes118

Files

ef78b1cbdd846b62803af81a8423c149_JaffaCakes118
.dll windows:4 windows x86 arch:x86

68ede98bf8a3232c4d19b62936c60555

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
ExitProcess
FreeResource
GetPrivateProfileStringA
GetSystemTimeAsFileTime
LoadLibraryA
RtlUnwind
lstrcatA

Sections

.sforce3
Size: 24KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ