311adfd82e3f521009a1c634821a4320_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

311adfd82e3f521009a1c634821a4320_JaffaCakes118
Size

4KB
MD5

311adfd82e3f521009a1c634821a4320
SHA1

1c7409fafa82d1038e2544349f6a6e4c16d58ab2
SHA256

0c47c02183f9798c976f64e8c1ce06fcb7d25bb6822f0645d8c859f68771e424
SHA512

5afefe48c7a2883da904c9949f6abe0aa515f3fe5517197dbba114fded5477efeb24b5a89ca5dc3590ae13b3707d5a4221e128d8a417a5762cf92df009d7a7f2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
311adfd82e3f521009a1c634821a4320_JaffaCakes118

Files

311adfd82e3f521009a1c634821a4320_JaffaCakes118
.dll windows:5 windows x86 arch:x86

eee5ab48f9e07352e908d25d6d1264ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
CreateFileW
VirtualAlloc
ReadFile
Sleep
ExitProcess

advapi32

RegOpenKeyA

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 587B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ