521e526b0249e1b71e3ec81f2ba5c7ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

521e526b0249e1b71e3ec81f2ba5c7ab_JaffaCakes118
Size

240KB
MD5

521e526b0249e1b71e3ec81f2ba5c7ab
SHA1

297b8cb2501da30b9bef21a6a232c5c5ab3c4e6a
SHA256

eea03d675df0cca2c14daf3ea468a24d7908c9e31260f59a98820657bc8e88a3
SHA512

897a61b8dd3e9c33d029044b01b9c6f60b1bdecec3c7a9cf2e87afd1dc84e4e7a51d82c7ae33b516418133b8471fc98b49587addd528a7ac7108a360092f9c27
SSDEEP

6144:Qtv9TUSDwBsmnVywmGrh+EUrUJGX5jGiZt1Z2wp6JTW0xi:Qtv944wBvVrY7rwGpjG8tT2wpMhA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
521e526b0249e1b71e3ec81f2ba5c7ab_JaffaCakes118

Files

521e526b0249e1b71e3ec81f2ba5c7ab_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9bc059fb1ba41707e7db497e461607d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetACP
LoadLibraryExA
GetModuleHandleA
IsBadReadPtr
lstrlenA
GetProcAddress
GetCommandLineA
IsBadHugeReadPtr
ExitProcess
VirtualAlloc
GetCommandLineW
GetOEMCP
LoadLibraryA

Sections

CODE
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ