122ac1f1547363fdbadccf57bc7e2e31_JaffaCakes118 | Triage

Sharing

General

Target

122ac1f1547363fdbadccf57bc7e2e31_JaffaCakes118
Size

15KB
MD5

122ac1f1547363fdbadccf57bc7e2e31
SHA1

ba447c3759f07aa163f4a4caf844366bfb97f5da
SHA256

9bfd505e771be672de6cfa44f4cc9631b22f8e908845e8af1ead9e102e655d3b
SHA512

0060ea55c3125c7bbd16af0393e63233ee5b741b300f3ab7bbde6962a8130007a3ae0b6aaaa16858973b9ec43bcfe4bbd6914d31f8a9116c664487954120b65b
SSDEEP

192:YodV8tqDYiIFcY4gIOLEYOhUz6d01b4gY3J5JvSMt6:J8tqDYiD86d018gY55RSl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
122ac1f1547363fdbadccf57bc7e2e31_JaffaCakes118

Files

122ac1f1547363fdbadccf57bc7e2e31_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0c589743f96fac09feab83681a6447b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
VirtualProtect
lstrcmpA

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ