06a4cbd57d8738531ca23e8456b29c87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06a4cbd57d8738531ca23e8456b29c87_JaffaCakes118
Size

40KB
MD5

06a4cbd57d8738531ca23e8456b29c87
SHA1

573fc8c052b76f13487e9d9a574466f60d9e88e4
SHA256

f6be2115350ef12d60cff534d998969125f74b509c8c7f6d39d172df880f0156
SHA512

7f4c03b7cb0bd4d147ca232d0444e08dd26da86f89c8d5bc101d34508233494be7db123816fd7058475e1de9535a6f5dd917032b6c44f4d9cadd31b4010cd8f0
SSDEEP

768:ynuIG8BN2M3su8c8YoxSvOucI1iTx4MKqsgDOvF0bc:/d8BIasoeud1OxtKqsuAGc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06a4cbd57d8738531ca23e8456b29c87_JaffaCakes118

Files

06a4cbd57d8738531ca23e8456b29c87_JaffaCakes118
.dll windows:4 windows x86 arch:x86

df250fdfe4036c495e789f5efe4d41d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
SetErrorMode
GetWindowsDirectoryA
SetCurrentDirectoryA
VirtualProtect
ExitProcess

user32

SetForegroundWindow
GetClassInfoExW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.secdata
Size: 8KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsec
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ