1434681fc2a2dc793973ab626195fedb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1434681fc2a2dc793973ab626195fedb_JaffaCakes118
Size

57KB
MD5

1434681fc2a2dc793973ab626195fedb
SHA1

9bc7b8fdaa7b4937286e9a34e83f3522377c2b61
SHA256

8c9f45badc9ff3c3b0bf0ee1052c9386968d9138bd0c97f5d7865bce6c516e36
SHA512

3ac8eb332bc70ee41fb878d3b5d7d202044774ce1f7af3b635f10349e4ac09e58b44ea61b22159bf9e98131145158e3a141b9967d495e7769684f9b525bc6e60
SSDEEP

1536:3/IMW390Ibr8M+cfmSCFJby20el698PoA:g7390IbScfmSYJl0ea8PoA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1434681fc2a2dc793973ab626195fedb_JaffaCakes118

Files

1434681fc2a2dc793973ab626195fedb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6f07ea296e3740277307fda1cca921e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
FormatMessageA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ