552fcf2bc8a770508bee858c13ee4598_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

552fcf2bc8a770508bee858c13ee4598_JaffaCakes118
Size

201KB
MD5

552fcf2bc8a770508bee858c13ee4598
SHA1

1887aec3d52f1750faf26e71229934ae11cfa87a
SHA256

dfa4f91a6f0d8090c2660e4bf3278353a98b6a1f3d7a1aec260b70b7beda8f52
SHA512

b2a4fe3f7a466930781845278b40c11cc7ec33d70306d26406984290f124cdd0a2be97a4f6488135a8ef58f3a37afab2e75a60768c7c5169a41cc7cfd3523f5c
SSDEEP

3072:sGnam2Vy76wQ3NTWo0Yk/PCXZ5oWc1qxJqwMcFgfdK+i8dBPWxyu:sGnr+y76wQd94TWsIqZcyhi8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
552fcf2bc8a770508bee858c13ee4598_JaffaCakes118

Files

552fcf2bc8a770508bee858c13ee4598_JaffaCakes118
.dll windows:4 windows x86 arch:x86

17f5b85fdf86fff38c5e7b2ad050ff8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedCompareExchange
LocalAlloc
LocalFree
GlobalFree
GetLocaleInfoA
GetLastError
GetTickCount
GlobalLock
GlobalSize

Exports

Exports

BackupArchiveClass
BackupClean
BackupCursorWordArt
BackupGamma

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ