0990751d80247d5ae73cf2278e9c60d3_JaffaCakes118 | Triage

Sharing

General

Target

0990751d80247d5ae73cf2278e9c60d3_JaffaCakes118
Size

271KB
MD5

0990751d80247d5ae73cf2278e9c60d3
SHA1

9bfb58596dc1e49a52e96eb6e9f1279720d3c2d9
SHA256

1e488293821ca06b7b1234aa2abc88a2b43c7d30b6526b54d260fa76c54510a3
SHA512

43b4eb6969e1a01b7f22aac55aba734f000abab75c8675a2b17c04f3f50f70661cc818153e36a2d64c6aab083f8f48cf6970be7af99fa56cd945b62cb40cfe01
SSDEEP

6144:0WJNwjE1jwi/HlPuIKGyragJpb9wSnCguMFZUWt:piE1jBPVgpBZTu7m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0990751d80247d5ae73cf2278e9c60d3_JaffaCakes118

Files

0990751d80247d5ae73cf2278e9c60d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e7f0be0e2d7e797f0abde16998fc1aa5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
ExitProcess
FlushFileBuffers
GetFileSize
GetModuleHandleA
GetStartupInfoA
LoadResource
RtlUnwind
VirtualFree
lstrcatA
lstrcpyA

Sections

.text
Size: 24KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ