1a7a55b9a95e961da0ab71a704a1fc3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a7a55b9a95e961da0ab71a704a1fc3b_JaffaCakes118
Size

307KB
MD5

1a7a55b9a95e961da0ab71a704a1fc3b
SHA1

a97f4d5b41049cd0a01069ebaca051c7c542a3cc
SHA256

71f03fa547dc227010a232c0a0676c4522a591936ebe319eb67cb41ce93504c8
SHA512

84030a6990bc69efc4d4182a02635fb25efd0e46cba88d8b7be2f3f9c78076a038465805464d758058c015626e0caa08f04dfe08a92ed246e9c1b7b8cd3d09cf
SSDEEP

6144:EaFDomaez3UbEQ9g7vEbVnvWiuoVuNGl2QexTNt7KHpRx:1FD7aegbEQ9jYRdm2QmTNtgpRx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a7a55b9a95e961da0ab71a704a1fc3b_JaffaCakes118

Files

1a7a55b9a95e961da0ab71a704a1fc3b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

960c97adb9e8ff8d84851b6857627249

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 234KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE