11eb7bd58c0729ac77251fc4b670e7b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11eb7bd58c0729ac77251fc4b670e7b8_JaffaCakes118
Size

35KB
MD5

11eb7bd58c0729ac77251fc4b670e7b8
SHA1

16aab5f2e36b387eb786cb29bdf678e52f5e92c6
SHA256

991a0e1754948b2a1ae6d66936472c3653bc186ad3fee97b5b193bdc963cf324
SHA512

0ac39dea91ef50abbc19638cba9e5b352e0fc705a2b398dc74ae29077734addbb2455a046deede5ecba92aaf1a84b479ce0822aa94310fc42e85ebc539d5bce2
SSDEEP

768:imRbEoe3vNDjEX+C6TgP/sLqCEU3jP0YBGYC3cpoP8wJ44rOg0:Xte/5jEsTgHsLq2LX/pbwa4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11eb7bd58c0729ac77251fc4b670e7b8_JaffaCakes118

Files

11eb7bd58c0729ac77251fc4b670e7b8_JaffaCakes118
.dll windows:5 windows x86 arch:x86

cc99e05b7190a016eb4e7dbb3f398a80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
EnterCriticalSection
ExitProcess
FindResourceA
FreeResource
GetACP
GetCommandLineA
GetDateFormatA
GetLastError
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTime
HeapAlloc
InitializeCriticalSection
MapViewOfFile
MultiByteToWideChar
OpenFile
SetEndOfFile
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

msvcrt

__getmainargs
__p__commode
__set_app_type
_cexit
exit
rand
setlocale
sscanf
vswprintf

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromGUID2

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ