00d65130a96f930ec997045a351c983f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00d65130a96f930ec997045a351c983f_JaffaCakes118
Size

44KB
MD5

00d65130a96f930ec997045a351c983f
SHA1

300cfbafd75e353f470d6881b54f500153a910f8
SHA256

afbc670b086656d3d87e77807ebe749132a0a83cf1386bcfa32dd373a7915179
SHA512

9a1c285b3828b3296bc17cf4698685b6c12c5f8c4d3f903b87141a65f3accba275d5ebb6288da33ba7a9986c54d7292816d0dc9be518072d925971aca86736a0
SSDEEP

768:31RLsWg8F9QNZu0GvuhSnZ6ttEre9cTnjGa3yMuoIfopzZYiCG1voNS:37Lsd8zcZXSZfrA4n6a3yXw4UVES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00d65130a96f930ec997045a351c983f_JaffaCakes118

Files

00d65130a96f930ec997045a351c983f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

146b299dff606deccb96055e258639c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect

msvcrt

_except_handler3
free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ