3dce1ce072dbc41cdbef5aaa15a29bb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dce1ce072dbc41cdbef5aaa15a29bb1_JaffaCakes118
Size

14KB
MD5

3dce1ce072dbc41cdbef5aaa15a29bb1
SHA1

8c6d17f478ddc686710a928e1ca2c6776c2adcb7
SHA256

c519d20b5d116225c5c012984bf21d6dedc97059922040b4ab3a01beffd0d0ae
SHA512

a4e747daf715d921c8c3a225a54fd2935ffa36ec4223ff64cb19663d4c0c7bee277c9af3e0b2a944b37dfa0959ffdeb207ccfe5216669af6a8451943c2028ffa
SSDEEP

192:4+WfRnh44jqyQnvK77aWpQSvmYCKqHARLx76k7CxjaBSks4vctq:ECywvK77ZpQUmYCILMk7CxqSkNv7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dce1ce072dbc41cdbef5aaa15a29bb1_JaffaCakes118

Files

3dce1ce072dbc41cdbef5aaa15a29bb1_JaffaCakes118
.dll windows:5 windows x86 arch:x86

0ee69e4805ac7793f6bcbd2f3185af1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
ExitProcess
GetCommandLineW
VirtualProtect

advapi32

AdjustTokenGroups
CloseEventLog
CryptGetHashParam
CryptSetHashParam
DeleteAce
DuplicateToken

msvcrt

_ctype
_chkesp
_eof
_except_handler2
_CIacos

Sections

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 831B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ