0ea814972b13afa8fcc7496c3c5c9b8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ea814972b13afa8fcc7496c3c5c9b8c_JaffaCakes118
Size

107KB
MD5

0ea814972b13afa8fcc7496c3c5c9b8c
SHA1

803fc4d1a12045e7e82f4143febe8eb38b2c4620
SHA256

b4a0c28d6be566682eab591c54b1f018047b015721aa2a6b0230e604689da74c
SHA512

bbd1200003a2bc6c8c125c98d277466ea58697c6aa33aefd5c14e8cf77ed30d4a7a51ec67e6b98cbd2723fa18a2aa7587b5edc1c76a39f67d77d21515ea5340b
SSDEEP

3072:dEtBIkrCAUy4QN7yaSEJzox+DRdANZV05h1Ag6:CtTCAUy97oQox+fAGX1k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ea814972b13afa8fcc7496c3c5c9b8c_JaffaCakes118

Files

0ea814972b13afa8fcc7496c3c5c9b8c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5959c7cbf2d7d913f2d8909d7846b7a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsFree
lstrlenA
SleepEx
ExitThread
ExitProcess

advapi32

RegOpenKeyExA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ