1bf6dc5471842f4dd87165b7fba592a3_JaffaCakes118 | Triage

Sharing

General

Target

1bf6dc5471842f4dd87165b7fba592a3_JaffaCakes118
Size

309KB
MD5

1bf6dc5471842f4dd87165b7fba592a3
SHA1

eff25e1fba401ef79ad22f8bf74341368acc591c
SHA256

235a6e589a9059e244804a5a15fd10b10e38a1fec3bb7891c28b6a02848b5935
SHA512

a2577e1b50f59ddf24a0e73eb275adfe9a1f08181d58a6eca8f066eae79bb14c380fa3e2570f414f2be925ee699ae7f91394e8bab8f4689b263000b24a116d75
SSDEEP

6144:xg0ScMBhuWKcuKQckwmyU2jmZhGqFcWfa2W2lAUroDdWfZTxzD9:xghjBgW0KQcfU26ZTqWyNOHr2dk7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bf6dc5471842f4dd87165b7fba592a3_JaffaCakes118

Files

1bf6dc5471842f4dd87165b7fba592a3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d58f292ffbd2b00fa779d18e5aac719b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect

user32

CheckMenuItem
BeginDeferWindowPos
GetWindowDC
EndPaint
GetCursorPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 235KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ