1193b45e8f2c93191d1b3957972d4b64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1193b45e8f2c93191d1b3957972d4b64_JaffaCakes118
Size

22KB
MD5

1193b45e8f2c93191d1b3957972d4b64
SHA1

0f95b1d093969bbcfdaedbd4a9f1c24f42c99f71
SHA256

d86f172da6a5c6a52899a5ebaf30f994816a9e4e521a28783fbdb1cae4bd9e47
SHA512

6289e25f94e01bfb529d15f9f6b5e5ea5306a96e5584864456d3a5f030a242fac799e84d9fee87b5b65e933ead5e0fed5f6f664907407370a5a375cdd797a944
SSDEEP

384:xccVzgNlKek52fAEQUXPO2APkxWI7+zBbbzpC6Ct+zSNftziJ:SEMlKee23QUXm2AMiB7pdVz2iJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1193b45e8f2c93191d1b3957972d4b64_JaffaCakes118

Files

1193b45e8f2c93191d1b3957972d4b64_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d5ccb19341016c0e2a376e92647cacc9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
lstrlenA
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleHandleA
GetShortPathNameA
GetTempPathA
GetThreadContext
GlobalAlloc
lstrcpynA
MoveFileA
ReadFile
ResumeThread
SetFilePointer
SetThreadContext
VirtualAllocEx
WriteFile
WriteProcessMemory
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ