0c2406c0d08e95ac59e5d9de4b2cc366_JaffaCakes118 | Triage

Sharing

General

Target

0c2406c0d08e95ac59e5d9de4b2cc366_JaffaCakes118
Size

307KB
MD5

0c2406c0d08e95ac59e5d9de4b2cc366
SHA1

12a0068899b2ce5a28ff744259fa5a139ec8fe0c
SHA256

f35cb94355e83769a5862a780d0dad1cb9d7e4c9eb329b6adea55f50d2c89169
SHA512

970a978b81f39b9b64a147f895b3b25c57af4a49aa9628770ea568ed757a304a5731df657001b96b7951a3b6ad60eaf2345073425d23ddf1d046f3169a37a644
SSDEEP

6144:OTF+itsxsCPF0vNGwgsV5GebzRceV47K+nWsoL19X2Q8a:OTF+iCxsoWxgw5zdp47Zn1Q8a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c2406c0d08e95ac59e5d9de4b2cc366_JaffaCakes118

Files

0c2406c0d08e95ac59e5d9de4b2cc366_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7475697cf1dea9b402f23a6bfa833be4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
VirtualFree
VirtualAlloc
LoadLibraryA

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 234KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ