5762ffa0ddbb75dec3f60f0844afea20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5762ffa0ddbb75dec3f60f0844afea20_JaffaCakes118
Size

175KB
MD5

5762ffa0ddbb75dec3f60f0844afea20
SHA1

47a8f964a4d1de99030250c12146943404014ae2
SHA256

f331e392f6d19976c73f304ed33bf5025bc6e611e38b51fa23689892ce8a34f5
SHA512

79bca2a78e08d1b76c4f6703a6824bf7395583faadb1d59fc508bd6ea81ad445314770177cdde38d9b3fa0a7e4fb92c1d6eb99675a2850b1e02e01626f51cb74
SSDEEP

3072:oJi4C5mFhrR5QPnFdU23qjDnZJDoLZVI1Mw9Woq2Kf7dNtEfnF55LI7:Ua0h4PnXRqjDGVI6wBKdvEtM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5762ffa0ddbb75dec3f60f0844afea20_JaffaCakes118

Files

5762ffa0ddbb75dec3f60f0844afea20_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1a6dcf3b48994a8a9ee05aac64959632

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleA
QueryPerformanceCounter
HeapSetInformation
GetModuleHandleW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
lstrcmpiW
CreateFileW
lstrcmpW

msvcrt

exit

shlwapi

PathFindFileNameA
PathCombineW

Exports

Exports

AThatTechnologyVersions
BeOutsideIn
EndorsedOrderJcpOverrideOrder
OfJavaOrIncludedSM
OfMechanismThatTo
TheVersionAnd
TimeIncorporate

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ