02241dceef9ca76477cd0d78a69003a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02241dceef9ca76477cd0d78a69003a1_JaffaCakes118
Size

25KB
MD5

02241dceef9ca76477cd0d78a69003a1
SHA1

d4a8e1a00722e3e7551316064766a93f2c3271f1
SHA256

18b842afe839863c2e7434dfd45dc691954d3fe74de1480f9af3c42f94d924f3
SHA512

5c406d0d443dac24da7243f17cb96ff256a19b2d272e7960221bd43451d8a5a314fdf3ad960d9c97b11de427b007a116ad003d391bee9aa2edb63dd36e58dfc2
SSDEEP

768:Z+t6DuC+R62Ob4a6HF8k+vMir+svlExo:Z+cDuC+O47Hdlym+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02241dceef9ca76477cd0d78a69003a1_JaffaCakes118

Files

02241dceef9ca76477cd0d78a69003a1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

be932b432e7d6ed20b3cd43bb36872a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

shlwapi

SHGetValueA

rasapi32

RasEnumDevicesA

iphlpapi

GetAdaptersInfo

user32

CloseDesktop

advapi32

CreateProcessAsUserA

Sections

.text
Size: 14KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE