155d0fda6c6cacf548090dbc2b3f2820_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

155d0fda6c6cacf548090dbc2b3f2820_JaffaCakes118
Size

4KB
MD5

155d0fda6c6cacf548090dbc2b3f2820
SHA1

862b0a84bc72d6db768af047931fe115b72f5860
SHA256

02d054f31c11227a94e97b746fe1017985a662f3dc693f3a5b3a82eb46a1e3c1
SHA512

fb3d778f495bad747d6966ad95f508c5dd6d1ac7bb8af19db75a3af0c4f421b7caa0ee372bb2743e972690dbe2bd54ddfe4e278b064f7296d11bf56a84a8546b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155d0fda6c6cacf548090dbc2b3f2820_JaffaCakes118

Files

155d0fda6c6cacf548090dbc2b3f2820_JaffaCakes118
.dll windows:5 windows x86 arch:x86

6b7704817c2e8ab31b07140c6b33d44c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
CreateFileW
VirtualAlloc
ReadFile
Sleep
ExitProcess

advapi32

RegCloseKey

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 545B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ