101892e17bea0f8f2871c33c75c2b1dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

101892e17bea0f8f2871c33c75c2b1dd_JaffaCakes118
Size

88KB
MD5

101892e17bea0f8f2871c33c75c2b1dd
SHA1

c87e01641866e623b089011ff3e49ea89cdf07b5
SHA256

7988e377dc4abe57462011159bd88f1cd369bd88e5f37bdf29537cc98949bb92
SHA512

1e590798c7d2b7a050ffbbf1a548807b68529307953867bdc04f4f915224a8e8bdf199254ce07ae72d91680dc1af61e005f9d83fa69d6c4b57cfc9992da50fb2
SSDEEP

1536:hszHL4h9YC2A3qbg6x/ItV6utBqh2OVRvE6oIF:huA9YjEqbgigt3BqrhlDF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
101892e17bea0f8f2871c33c75c2b1dd_JaffaCakes118

Files

101892e17bea0f8f2871c33c75c2b1dd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8903671f4098c2645978cd9f4d1b964a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrcpynW
GetProfileStringW
ResetEvent
GetSystemTime
GetFileAttributesW
CreateHardLinkW
EnumResourceLanguagesA
EscapeCommFunction
GetVolumePathNamesForVolumeNameW
lstrcmpiW

ole32

OleRun
PropVariantCopy

shell32

SHPathPrepareForWriteW

Exports

Exports

userobjIde

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 642B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ