0b25eaae278e8817eaa1382d21e370b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b25eaae278e8817eaa1382d21e370b1_JaffaCakes118
Size

162KB
MD5

0b25eaae278e8817eaa1382d21e370b1
SHA1

e39655281b34cefdf3d8f24bf2aff5f85fafdef2
SHA256

acfddfac6e97663f8326486289061541bfd704b3b08015179be97b1d549d2d89
SHA512

f0883896e9faa3de97856f8aff0c7d7711cb8795eb4baafabbfcaccd219b27a08c75cc4e06f0e613e97053c7447974ea656abe4271eeaa94979db028fd0916cd
SSDEEP

3072:CqBUeqxj5+L4jQt0lUgarbLEqV4xkX1VvGG/JSIjtnHlkMGSaXqzX7dSGIQFVta2:Cq9qx8Estcar86ESVflpyMaXqzX7dSEb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b25eaae278e8817eaa1382d21e370b1_JaffaCakes118

Files

0b25eaae278e8817eaa1382d21e370b1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4501f0f4bcc646a898d54d563cbe3707

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtectEx
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

PostMessageA
IsChild

Exports

Exports

Qsijetbeex
BeginIexeaynsjd

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA2
Size: 3KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ