11cf553c37d330086339dbe28d833f23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11cf553c37d330086339dbe28d833f23_JaffaCakes118
Size

22KB
MD5

11cf553c37d330086339dbe28d833f23
SHA1

5ffa1c5b947fc056110818327c4b9db2ff213eab
SHA256

143735df15df4964532f012cfac9aa8271f1256471fe676ed33a917f5224cd06
SHA512

a79c5ccdfa383f502be80bed126d5011e47c0e456ad888c31db5debea9516dbb57583ceb15678e81669cba9e8774504942aae5114a3baf47677c163d030b4212
SSDEEP

192:x8L/vOlSunPUgfmbpE9txKbBHRaar4Ph0Wpsps78p3BM7:x6OlSy7mb690BxaaEPSWpsps78pRM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11cf553c37d330086339dbe28d833f23_JaffaCakes118

Files

11cf553c37d330086339dbe28d833f23_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ba094cbf79fdaed0fc9b5fe035a045d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateThread
DisableThreadLibraryCalls
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
IsBadWritePtr
Sleep

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
strstr
system

user32

GetAsyncKeyState
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ