5472a82b9febb2edca47d0d8b6156a29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5472a82b9febb2edca47d0d8b6156a29_JaffaCakes118
Size

1.6MB
MD5

5472a82b9febb2edca47d0d8b6156a29
SHA1

85bdef7994cff76beb1a57e5a1dd22c6fa944aa6
SHA256

b2d0c5d62a4ecf055f538207a3993c0bc7f44970331778732f54b30ad2240da4
SHA512

f79553350f95578055981de9c0b596389aee0e797bb09f7d0318cdd4fd9d420ec07ba7865009910ad4fdaa7cad82f47742d14d8c4d0cdf17885c13d20f0b4306
SSDEEP

24576:uh89UmGzinZoFct3ChF8n7VgFGdyqRU8SumFNzFPaIg4xgi4HIubALR95XONnFIW:O8uHiwct3Cw7G0JW82r8I9LRHXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5472a82b9febb2edca47d0d8b6156a29_JaffaCakes118

Files

5472a82b9febb2edca47d0d8b6156a29_JaffaCakes118
.dll windows:4 windows x86 arch:x86

00201e941d8b581eea260b493a33b9e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringW
ExitProcess
GetCommandLineA
GetCommandLineW
GetCurrentProcess
GetEnvironmentStrings
GetEnvironmentStringsW
GetFullPathNameA
GetLastError
GetLongPathNameA
GetModuleHandleA
GetThreadPriority
GetTimeFormatA
GetVersion
GlobalFree
IsValidCodePage
SetFilePointer
SetStdHandle
TlsFree
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
lstrcatA
lstrcmpiA

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ