54cc7a73c7ef000f3a27186012bfd3f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54cc7a73c7ef000f3a27186012bfd3f0_JaffaCakes118
Size

4KB
MD5

54cc7a73c7ef000f3a27186012bfd3f0
SHA1

df42830377310b51c5855545b6cec950f02aa929
SHA256

48c03cca8b130639b84ee93e6af66a08a4094bbc49d4c044c49c637737ae1f23
SHA512

6f6adda0e16adaf74e4d3b766b65337bfc3f45a2dab424402794a784c3494805d810858851f563f764e51fd518d03144271f268a294315b40956527564b3a230
SSDEEP

48:a7Q2voyT+Bt5a9i30r7MPS7G9Hu+vS+5DJ:qT+ZKz7MaC9O+v3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54cc7a73c7ef000f3a27186012bfd3f0_JaffaCakes118

Files

54cc7a73c7ef000f3a27186012bfd3f0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

b1739664e08d6f9c7ad5fbd4058e1368

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
SetEnvironmentVariableA
ReadFile

shell32

ShellExecuteA
ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

krnl

Sections

.text
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 497B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ