268bb5e8d8da132106fa5ee478096bc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

268bb5e8d8da132106fa5ee478096bc6_JaffaCakes118
Size

9KB
MD5

268bb5e8d8da132106fa5ee478096bc6
SHA1

558b0ba42a320e03d8b4b6a1b7c569a909c651c2
SHA256

b4899b9f2d259d488f035cc725795dca75a6b343d944329988df7b71338ed274
SHA512

2e28e785a4a5dc3825c863a4d8182332b5557a5ce8e0e3bc1c48ff69d4fe3ee5aa3cee7ac48fda1a2b07ecb8cee4f16f24189a96b8410e930f835eb811146a8d
SSDEEP

192:SgURNQYxVp2VpKjEwq2nIY3hHlj7jTTXwi1PP9ukfX01WGWp:SgavqpoDqxYRFj7jfXwih1901WGWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
268bb5e8d8da132106fa5ee478096bc6_JaffaCakes118

Files

268bb5e8d8da132106fa5ee478096bc6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e9a3cf3c2366c213e87db4ab8c465c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
CreateFileA
CloseHandle
ReadFile
CreateThread
WriteFile
VirtualFreeEx
VirtualAllocEx
Sleep
GetFileSize
GetLastError

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 880B - Virtual size: 873B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 304B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 864B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 624B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ