3dac06be45fea2d802c8691b905ca732_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dac06be45fea2d802c8691b905ca732_JaffaCakes118
Size

240KB
MD5

3dac06be45fea2d802c8691b905ca732
SHA1

86e571c54d88dfd372ab0872004394c0976b5d18
SHA256

cf492ec79adfef10201b5e7df36cfbcded470f95113310f4bb59e48698e7ad5c
SHA512

ea2e4153cd605aac5b3372b0822b816c462cbcb03016ff9507e8fa2539a937b61ac5b452cc88b98d626763df34f9d6ebb0a8f53d1db59c2d5da6033eef1393a1
SSDEEP

6144:Qtv9TUSDwBsmnVywmGrh+EUrUJGX5jGiZt1Z2wp6JTW0xi:Qtv944wBvVrY7rwGpjG8tT2wpMhA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dac06be45fea2d802c8691b905ca732_JaffaCakes118

Files

3dac06be45fea2d802c8691b905ca732_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9bc059fb1ba41707e7db497e461607d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetACP
LoadLibraryExA
GetModuleHandleA
IsBadReadPtr
lstrlenA
GetProcAddress
GetCommandLineA
IsBadHugeReadPtr
ExitProcess
VirtualAlloc
GetCommandLineW
GetOEMCP
LoadLibraryA

Sections

CODE
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ