0f614fa488eae8b7581c03af398ec733_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f614fa488eae8b7581c03af398ec733_JaffaCakes118
Size

67KB
MD5

0f614fa488eae8b7581c03af398ec733
SHA1

a994dc1f4717c55a5fe4c4bc90957ad608e1b5be
SHA256

0e6ab688e774f75ebc76490f05298abe3058b5aae2e9c9b40648ef518107d739
SHA512

0c1accd42a56b3846796abbfdd09741c5ff6b376a6522563eb43fc6288f59ba4a77f3c8042df6a567f8246b133fb9e96c077fbb2093e415773fba26ae481290d
SSDEEP

1536:C5mBp/xO0g9nxvBy6IDNLTT1gVVPCa6kw7/C7rzidZGzjTNe:Cgb/QhnxRIDVT1gVV+pBZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f614fa488eae8b7581c03af398ec733_JaffaCakes118

Files

0f614fa488eae8b7581c03af398ec733_JaffaCakes118
.dll windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 100KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ