28361cdd9c414acffed8ab014bd87025_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28361cdd9c414acffed8ab014bd87025_JaffaCakes118
Size

11KB
MD5

28361cdd9c414acffed8ab014bd87025
SHA1

d3e4a2aca901252979b85f33d9540e2bf26450f3
SHA256

e04a33f2fe47309ce0a3f7491ed151b47ba04f32396e26115b891a2903b82771
SHA512

60db7f12c3bbca58cdd333b0edf8a27e0e0674e1d3cba97ebc641698e08b4f4b01c6cce2636fdb94c46f29525fed8c5ddb451d433dcd4cdfeb2c0303f5826d32
SSDEEP

192:GglCNy5/L8rBe6oi/J/kgLeYADlaoyqVuF6WXR:AEJ8rc6oCJ/kgKxDllVuFV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28361cdd9c414acffed8ab014bd87025_JaffaCakes118

Files

28361cdd9c414acffed8ab014bd87025_JaffaCakes118
.dll windows:5 windows x86 arch:x86

7ad4e3676ebf6ca339e46251b4924c81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
lstrcpyA
GetLastError
WaitForSingleObject
Sleep
OpenMutexA
CreateMutexA
CreateThread
GetFileSize
GetModuleHandleA
SetFilePointer
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
LoadLibraryA
GetTempPathA
DeleteFileA
lstrlenA
SetFileAttributesA
CopyFileA
GetProcAddress
lstrcatA
GetSystemDirectoryA
lstrcmpA
CreateFileA

user32

wsprintfA
CopyIcon
MessageBoxA
LoadCursorA
SetSystemCursor

Exports

Exports

Export

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ