1c4bef9e80165f314e7c3fcd8b3af671_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c4bef9e80165f314e7c3fcd8b3af671_JaffaCakes118
Size

103KB
MD5

1c4bef9e80165f314e7c3fcd8b3af671
SHA1

c1f8c0c22f62b8fafb601ac5d7ea07cc1c8aa635
SHA256

71b5c07192f8664952bc5956f832da04e7058a499b4c4fd7fd30f49e5cde9a8d
SHA512

1472e002017b2e73857df404a9633e372e2587d639829ab8728b856314acbaa58afdc0f6d5a6359280ed5c3b234648555513e6bba9c0f6efb939fec54440efe8
SSDEEP

3072:FAaJSMxQJZ0iLMe/Ih8bWcUQWuN5hv4Ji:F20HUI9cUm5hvMi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c4bef9e80165f314e7c3fcd8b3af671_JaffaCakes118

Files

1c4bef9e80165f314e7c3fcd8b3af671_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b843944ace23453d54c976b6bfe95c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

MessageBoxIndirectA
BeginPaint
DispatchMessageA
GetDesktopWindow

gdi32

Arc

Sections

.text
Size: 71KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE