024feda6b133bbf1134b5bca1dad5366_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

024feda6b133bbf1134b5bca1dad5366_JaffaCakes118
Size

43KB
MD5

024feda6b133bbf1134b5bca1dad5366
SHA1

b4f7502ee0942fc574ae1498d75ebacc69c532c3
SHA256

02600425a12e51dc1dca4514886b9be32e84d03604006c1f3ab6d694f0e1cb52
SHA512

5db7aadaa3553777cda0db343cbd525ae3f8bab819c4f6866f3fd9cc39b4c0c79b69008acf6b20e171be222307568c7a49b606db26b8f00fe101e5bfcc43e1a2
SSDEEP

768:mtABNmAUaSdIxhkdZHZ4iv1QwEl3V8gbv0GyCsa9KwgN34u3:mtABBSjHZ4iv2nVDbMbH7X3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
024feda6b133bbf1134b5bca1dad5366_JaffaCakes118

Files

024feda6b133bbf1134b5bca1dad5366_JaffaCakes118
.dll windows:4 windows x86 arch:x86

53161c3dcb613f12b6214bdf2d58f204

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

timeGetTime

user32

wsprintfA

msvcp71

?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ

msvcr71

memcmp

opengl32

glEnd

Exports

Exports

CreateInterface

Sections

.text
Size: 38KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE