001d70a3dcc9b82019d0f1d679a18c40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001d70a3dcc9b82019d0f1d679a18c40_JaffaCakes118
Size

3KB
MD5

001d70a3dcc9b82019d0f1d679a18c40
SHA1

acd119b1109b7d7a5cfb4a532a2821cb64103eec
SHA256

81955bbbf7b254c9eb82296208d99b8b7d8da702ba3840fc0bbc15b4016be9d2
SHA512

be9face0d4a38e591cdeaa89282d40427587e1b8097d5ced80d332b6dde932638f9511a320b9852ed9d3f9d2edfe96682d18cd20a97d411fb99e0a12b786f69b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001d70a3dcc9b82019d0f1d679a18c40_JaffaCakes118

Files

001d70a3dcc9b82019d0f1d679a18c40_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ