0c56cdf3473d541e17e3ed877e19a5a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c56cdf3473d541e17e3ed877e19a5a0_JaffaCakes118
Size

216KB
MD5

0c56cdf3473d541e17e3ed877e19a5a0
SHA1

8fbd3b8c7f024fadd51d7ee05b83e18868f801fc
SHA256

7d1c363826adf500840f6f9048cbe8607856cb3a2fadc8e123184f147bdf2dfd
SHA512

790ae61cc162aae82c30d507b0aa69233b55574b1656e63b3471af9c0778b98069f0984baaa304de0fb087d58df92ee83047b730e1bd10eaee640a2e012de38f
SSDEEP

3072:xxCqxwDP4fsqM4duOH263U8sA5O3EUYmN/WBdXPM/2AunR5Gwyhel:vRSDP4fsq133U3EUPtS/rLGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c56cdf3473d541e17e3ed877e19a5a0_JaffaCakes118

Files

0c56cdf3473d541e17e3ed877e19a5a0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9302074b4de435ec7a85727c853b711c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalReAlloc
IsValidLanguageGroup
FindNextChangeNotification
GetLocaleInfoA
GetLastError
GetTapeStatus
InterlockedCompareExchange

Exports

Exports

DefaultCodec
DefaultCursorIndex
DefaultOfficeClass

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ydata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ