01c259df6dfcd7b67065db4616972383_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01c259df6dfcd7b67065db4616972383_JaffaCakes118
Size

68KB
MD5

01c259df6dfcd7b67065db4616972383
SHA1

730f115ac3d3e5110b082272281db157721b8f56
SHA256

562ca2442b42bcd0ef8f7fadfaed15ec42583388773c027cf37cfa62b2beda5c
SHA512

df2db8dda7db5618efe3960a974c4b2fdfa6a67b52768a8393899c8d0bce4c4678c1f5971188731fde8ad8014ef2f832c008919a03045a4fc6b9a58d6244530a
SSDEEP

1536:SstRecr+TrFhEPfzVsDPFs1hIQFVDCZtpVXzlH:JtR+NeBsDts1hIQFYplzlH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01c259df6dfcd7b67065db4616972383_JaffaCakes118

Files

01c259df6dfcd7b67065db4616972383_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e1112b6722a3cce6443d7e0d778068c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitThread
FindResourceA
SetCurrentDirectoryA
SetLastError
ExitProcess

msvcrt

__p__commode
__set_app_type
fprintf
swscanf
wcscat

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 780B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ