f98af1afb87f16c49a8d57df6b0e54c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f98af1afb87f16c49a8d57df6b0e54c9_JaffaCakes118
Size

98KB
MD5

f98af1afb87f16c49a8d57df6b0e54c9
SHA1

58ffaffb248a520f262461f1b4ef19e73a861337
SHA256

cf40827bcb4465defe2e885c2af0e2c9cd1019094e3d4a2181b76746885b307c
SHA512

24812cbd71c2f40ddc84cd927b4431cf50fee1d6036492d1a42db956d63be793b750fe40151405273bb5966c8781c62e70fe00d08764330adee46009b1350e02
SSDEEP

3072:HL4ZL2YnZLksCbA/4B78Jr4h+4wGKzRy:YnJkXzB64hOG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f98af1afb87f16c49a8d57df6b0e54c9_JaffaCakes118

Files

f98af1afb87f16c49a8d57df6b0e54c9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

52d655e27c46ed815b92b371ab4655aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
IsValidLanguageGroup
Beep

msvcrt

memset

Exports

Exports

qufppwe

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ