039acaafddc8aa4dfa98d8395700c601_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

039acaafddc8aa4dfa98d8395700c601_JaffaCakes118
Size

25KB
MD5

039acaafddc8aa4dfa98d8395700c601
SHA1

7f74b5201a2d3fca2c28eb49ff4003bb7d70796b
SHA256

556519d431d3453f16829c9ba7bcb4e7592f48140546e0bbf351b6712736e008
SHA512

4796b94414384f5cc993511e5dc7942a8df6385837af2fba1800c07a00f4fb88670e96119c720eb62cbbe5930412e0b058c9c719dc984a4c26d360e4fb5056be
SSDEEP

768:3qGggrs4e/GLm1pqaOW0AX8G5lMW5pplpJROyt:6AD8GLmRTpXB7MW5rlpmq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
039acaafddc8aa4dfa98d8395700c601_JaffaCakes118

Files

039acaafddc8aa4dfa98d8395700c601_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d58f292ffbd2b00fa779d18e5aac719b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect

user32

CheckMenuItem
BeginDeferWindowPos
GetWindowDC
EndPaint
GetCursorPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ