259bde50e93361b93e4aa5abde2e5100_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

259bde50e93361b93e4aa5abde2e5100_JaffaCakes118
Size

108KB
MD5

259bde50e93361b93e4aa5abde2e5100
SHA1

2ae555562a8df629496893b653b4914630f701f8
SHA256

6de37751bdfdaa81e1de93c9fb2aba862a11492cd0c713829e323f497b0b9aa4
SHA512

4ba35c28c786eac02d8f64fbf1ee026fdbd86adb21b9a0b2afb11a1400d504ffd70cfa38dc6576b424963be17da5ab2e8a4ab4a7d5eddcfe9d060069e6927994
SSDEEP

1536:LGvIFuzXVVD8nGhup7xIuXgtt5wB4SmZNZNY:L+xTVVAGMdFXO5wBaZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
259bde50e93361b93e4aa5abde2e5100_JaffaCakes118

Files

259bde50e93361b93e4aa5abde2e5100_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dd3b141e11c71cb101af46c72d269d64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileIntA
ReplaceFileW
DeleteFileA
GetModuleFileNameW
MultiByteToWideChar
SetConsoleCtrlHandler
HeapAlloc
CreateFileA
EnumSystemLanguageGroupsW
GetTempPathW
SetEnvironmentVariableA
LCMapStringW
ScrollConsoleScreenBufferW
VirtualFree
VirtualAlloc
SetVolumeLabelA
WriteConsoleOutputCharacterW
DisableThreadLibraryCalls
TlsAlloc
FindCloseChangeNotification
CreateFileMappingA
GetProfileIntA
FindVolumeMountPointClose
ExpandEnvironmentStringsW
UnregisterWait
GetCalendarInfoW
IsBadStringPtrA
GetFileTime

msvcrt

strlen
memcpy

Exports

Exports

ChecksumFlat
ChecksumLinux
ChecksumMenu
ChecksumMetafileVertical
ChecksumTiger

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ