f6f4833c88688e12875acecc5aefad16_JaffaCakes118 | Triage

Sharing

General

Target

f6f4833c88688e12875acecc5aefad16_JaffaCakes118
Size

89KB
MD5

f6f4833c88688e12875acecc5aefad16
SHA1

fb00bb8d792e635c55c0b28f98ee5c35c64ac936
SHA256

d53f0a05ee0708b03fb855f43bca40e39e81d81aaf3413c1c74949d1c8f29138
SHA512

b2c862d9ad893ad00174fbe99a03669a6e739b68462127d25e51ba2cdba75ceec2b0d6859f1cbe97260c087cec15daf167ab844e310183a24ca44e67d6f314c5
SSDEEP

1536:oqqAF4zlm2qUrLOJI2mirnT8unfK+VfCJbuzk+JOUZcImkPtlv2oI6/x/mV3:vB2DrLOJIpiouCVJaz55ZcyttIj3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6f4833c88688e12875acecc5aefad16_JaffaCakes118

Files

f6f4833c88688e12875acecc5aefad16_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a9eece101a0f3ec67fa6ee814a242134

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetAsyncKeyState

winmm

PlaySoundA

ws2_32

recv

d3dx9_33

D3DXCreateTextureFromFileInMemory

Sections

.text
Size: 84KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE