057122b9bf9d89730357826cb2ac473b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

057122b9bf9d89730357826cb2ac473b_JaffaCakes118
Size

231KB
MD5

057122b9bf9d89730357826cb2ac473b
SHA1

3f13f3a1034bca388dc7198d678c1753ec023055
SHA256

c49653bfbc5e0cab44d9dd48851dc6057b9dfc3a455c6ee3127bb27152743591
SHA512

bd1de4d8cffc3cc81296fa0b98f9682d6c7fdeb3817b16225ff54cd5445bf2b7d9ddbc6ba71bce3c391217bfd0e27554d14569c4243e457320d99d61dfae6fb5
SSDEEP

6144:kd5Pxv1bOnIxM84OeyqnI3SCfWwXmvraw+9d3SF:2DbOn0wyLSbw2vwSF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057122b9bf9d89730357826cb2ac473b_JaffaCakes118

Files

057122b9bf9d89730357826cb2ac473b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sext
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 564KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ