1442077451cc854f3b617087228c3f54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1442077451cc854f3b617087228c3f54_JaffaCakes118
Size

748KB
MD5

1442077451cc854f3b617087228c3f54
SHA1

6f02f67f4e8c97298cb9a99caa76224fe4d66571
SHA256

12ed86b287cdc76afb3c4f1647310ee7f337b244135043a9f07854134ba3b17c
SHA512

b96d4e4cdc577c64a71b5ce649887a8d35e01a562e73de34c443362d0149a20ceeb308693156513ceed4d8c2f6bd62ea005032d4e61ec783e50a1432003e14e4
SSDEEP

12288:BD3wh8MN7G1i6WMTYsno73OGPW54l1Ifuuy4FW5TCcgfxriVsD82OFu1iP6gzO7:BD3wWMVMs48xEc1INWZJgfisD82OFu1Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1442077451cc854f3b617087228c3f54_JaffaCakes118

Files

1442077451cc854f3b617087228c3f54_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3ba0c808b50da45933ca97f15d6951a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetNextVDMCommand
SwitchToThread
GetVersionExA
lstrlen
GetEnvironmentStringsA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

data
Size: 4KB - Virtual size: 1004KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 739KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ