007cf6f003e8a031d81ebd967a9120e9_JaffaCakes118 | Triage

Sharing

General

Target

007cf6f003e8a031d81ebd967a9120e9_JaffaCakes118
Size

166KB
MD5

007cf6f003e8a031d81ebd967a9120e9
SHA1

cd792a71c42b197a338aadd67f96dc6bd4e3a412
SHA256

5b275ef1e0b9f45b4bae566050d4be9a015a252329ca26a4ebeae3c660ccdb9c
SHA512

4ece58470cb2b184d1e5f1701364d1e23de2f39200beb0c949cb1f5ff83f0f802a6088a8d75a3f49186e0eea75f58d003b7ec2b9590dbbbb3bf5bec44af10858
SSDEEP

3072:SGlrn7trlSNwrqgYYC+u2xsu97myyq5EiXcjK0x:SGlr7trlv+gYYCfk6Hq5EiXcx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
007cf6f003e8a031d81ebd967a9120e9_JaffaCakes118

Files

007cf6f003e8a031d81ebd967a9120e9_JaffaCakes118
.dll windows:5 windows x86 arch:x86

61a7c8521bdd9fa606f9d3b34ba5014f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
GetModuleHandleW
GetProcAddress

gdi32

GetStockObject

advapi32

RegOpenKeyW

msvcrt

_except_handler3

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ