0b563ac8ad97c989bf0830e9d18c6e16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b563ac8ad97c989bf0830e9d18c6e16_JaffaCakes118
Size

16KB
MD5

0b563ac8ad97c989bf0830e9d18c6e16
SHA1

14137d754cbe7d84a73ba844cf13d6257fa013fe
SHA256

c323bda23e80e4d694e6d0d4b45d5868554ff14fba02709b6a4ae07662f70a78
SHA512

3afe89c37b58efa353507a18cc5f92176f5f63608774dffcb57d13ea4805e9b57359cf8977bf307a82cbb888d9ed1aba466a35b9e5869f9e280fc63b847ac21b
SSDEEP

192:cUssCqGea0S2nH6VO7Sllv1/zY5N+dViSJhOyNMq0sx1gK67hsTDw7Qd8:DssCqGea0ZnH6dld7uN+mStVYpEC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b563ac8ad97c989bf0830e9d18c6e16_JaffaCakes118

Files

0b563ac8ad97c989bf0830e9d18c6e16_JaffaCakes118
.dll windows:5 windows x86 arch:x86

e549385b09f4f56c3deafab07dd29b61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
GetWindowsDirectoryA
VirtualAllocEx
CreateFileA
LoadLibraryW
GetProcAddress

advapi32

RegOpenKeyExW

ole32

StgOpenStorageEx

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text2
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ