5774bfb2ca5e1640c3801cae5a573d09_JaffaCakes118 | Triage

Sharing

General

Target

5774bfb2ca5e1640c3801cae5a573d09_JaffaCakes118
Size

52KB
MD5

5774bfb2ca5e1640c3801cae5a573d09
SHA1

a6fb44f61cce88eb7515726ee21fa08681120fac
SHA256

e830f023377a83e702c2ccd68849e338772d8f3e6ab77a1b8a90e3e2bfbaa314
SHA512

75929105811f4baef61e320c17ffc0f55a1c5e6f30b5be241409245b6106b890bd5e1935ea0a3b915d08947d14bd8e3fafd745518df0b2a2a23c492bb5e0a50d
SSDEEP

192:zXYdmADMNASIfuCtrey+Am5lYRb1GMlkgnG67Wy7MBBjvM:1ADMuJfuCgyhMyk07WT3j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5774bfb2ca5e1640c3801cae5a573d09_JaffaCakes118

Files

5774bfb2ca5e1640c3801cae5a573d09_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e4b9ebacc8a2d7c69438f6efebaddd4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeResource
SetFileAttributesA
GetFileAttributesA
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
FreeLibrary

msvcrt

_initterm
malloc
_adjust_fdiv
free

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 702B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 665B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ