15d996f60e39e8c79d4193c26740f8d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15d996f60e39e8c79d4193c26740f8d0_JaffaCakes118
Size

4KB
MD5

15d996f60e39e8c79d4193c26740f8d0
SHA1

3ed396ea59e5c3379c959d7afda41e3c8ea87b7b
SHA256

48ba295d52aee8ca8913cc6adb14264859897f316ae8652e2d4d52c09dfd4cd1
SHA512

2771e31fe37b341f88d8a6b59158d7daf83b731ad76a3df57f658c1badcf4d47d50debb65e7769fd26fc0e9ac572ea7188ffd4c4faa0aad61bffbead5e564865

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15d996f60e39e8c79d4193c26740f8d0_JaffaCakes118

Files

15d996f60e39e8c79d4193c26740f8d0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

258c11641964bb909c3238b46d0f6d27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

user32

wsprintfA

msvcp60

??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ

msvcrt

free
_adjust_fdiv
__dllonexit
_onexit
_initterm
malloc

Exports

Exports

ArHcmenR

Sections

.text
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ