e77625dd228986b96625035ec62bcfc7_JaffaCakes118 | Triage

Sharing

General

Target

e77625dd228986b96625035ec62bcfc7_JaffaCakes118
Size

62KB
MD5

e77625dd228986b96625035ec62bcfc7
SHA1

813ab42cb6c0c2d1c70347f9e69c10a6be534590
SHA256

71ca5a90ebf6d7adfe980637d8e30ab0aa7147d7c049d965652047e1d6f097c7
SHA512

a76a4d1943ced89053c6260c2b001e59b7da44265c6eca8f64298bb862b736e6feae19334856e48af5c7a4775616d82790d08e1a78f590699b7bc620b2321485
SSDEEP

1536:V1I9XuX/xgGeKzdcl1zFlNvNWPQpiLuUdR8sc:A4eohM1zz5kIoqQ8sc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e77625dd228986b96625035ec62bcfc7_JaffaCakes118

Files

e77625dd228986b96625035ec62bcfc7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 364B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE