0792a2c685edd6dfbf5aa31d13462794_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0792a2c685edd6dfbf5aa31d13462794_JaffaCakes118
Size

307KB
MD5

0792a2c685edd6dfbf5aa31d13462794
SHA1

82ca08ccc426c38143c27a4c35c51799a8a0da6a
SHA256

f417ebfb7d9560c20b789acb9cd1198f32e83385826e3a340cc4724dd6630c32
SHA512

f1cf7fcd39d7b9692c6610a808b6d7c4fa83c132bbbc4e11d2cb93a9b47032f48ee7b317fd06b21c218c5d5c8ebeb9b71e12c83a98d32cca31e9b99d26d437f6
SSDEEP

6144:Xe94NWkFtvL3514E0HmeonGeOFq1Ib6vj5qxJomGhzDjuhRerYqx2y:Xektvz5eE0Hmdtab6vj5qxJRQzDARWYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0792a2c685edd6dfbf5aa31d13462794_JaffaCakes118

Files

0792a2c685edd6dfbf5aa31d13462794_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1a4f68363ac38fcf8ae88d8cb6e8c0d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc

user32

CheckMenuItem
GetCursorPos
BeginDeferWindowPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 233KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ