1061925d99668b8b6a23575e9816d86e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1061925d99668b8b6a23575e9816d86e_JaffaCakes118
Size

61KB
MD5

1061925d99668b8b6a23575e9816d86e
SHA1

18f30def8d7e6598053564e505e9eab0ce5cd0f2
SHA256

9af0f9d6e2ae5ff6d3fe6c3599e6f589e98786260a04d92b1d7e86f2369b7da0
SHA512

aa36344eb12dfbe3564af43ba06f8f4b7522942c77ec36bf06691f4bcdf924c28fa44718366df418ad9acdba1fb35c2f601ae86879f7081922c518f27a3a00fa
SSDEEP

1536:8G3qJKU3xC5ukSZyTzGus4SW0kmOW0DL1ZT:8G3q8UhC5kunSZP0dZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1061925d99668b8b6a23575e9816d86e_JaffaCakes118

Files

1061925d99668b8b6a23575e9816d86e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d8446159734e9aab5a2c04977af2cf1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ald.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
FormatMessageA
QueryPerformanceFrequency
Beep

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ