f725a12f1c45a29e0b5cc1ae6dce4893_JaffaCakes118 | Triage

Sharing

General

Target

f725a12f1c45a29e0b5cc1ae6dce4893_JaffaCakes118
Size

270KB
MD5

f725a12f1c45a29e0b5cc1ae6dce4893
SHA1

2177f68dc7c1361bf9e4fd10d5daba1ddf4b6738
SHA256

b63caca25d0a255729a0c6b38d51b2c1bd79f976c2034d9b9e1891047fcebfdd
SHA512

b03531e52d21a39dc3f156791d854b61ca789657cd23a0e29782f9ff9ba6c2198d664dc472b9f2d4720dfa820817c1d85e95581d390f1cfb7c1c7d19988efe4d
SSDEEP

6144:MhGqYfzdnK22EWU9Ovvg55w4V4dMrubjyl4k00sDtz5W7xLYHJq:yGVW0we5w4A/jyl4k0JFWFCJq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f725a12f1c45a29e0b5cc1ae6dce4893_JaffaCakes118

Files

f725a12f1c45a29e0b5cc1ae6dce4893_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9a5b7a6d26cab3086fdf0a99839d0078

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
ExitProcess
FlushFileBuffers
GetDateFormatA
GetFileSize
GetSystemTime
GetSystemTimeAsFileTime
TlsAlloc
lstrcmpA
lstrcpyA

Sections

.text
Size: 22KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ