291e8e0efb7987a81dd89bd9878cfed4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

291e8e0efb7987a81dd89bd9878cfed4_JaffaCakes118
Size

88KB
MD5

291e8e0efb7987a81dd89bd9878cfed4
SHA1

8d5d3e2efb21978964fcf272084aa1781309a1b6
SHA256

009f866b2eb5a20c70906307b210be5b92715da6b4366a96d3d446cc310e6a07
SHA512

f8cd481e4d1fd9f5ac5d80fdac894cfaa8b39ca5cf6c2b785945db25609ca9f1927e30f781d6e121ad0fc3a8ab9a5fa4ce6adf18855574bbb994a00bbe4204b9
SSDEEP

1536:GldTU6EAsT4hL+1Q//gAUWFXKLvStQlvf5IUJS6HZpl8Ou19:ea6GTi6KgATFaututBDer

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291e8e0efb7987a81dd89bd9878cfed4_JaffaCakes118

Files

291e8e0efb7987a81dd89bd9878cfed4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1a4f68363ac38fcf8ae88d8cb6e8c0d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc

user32

CheckMenuItem
GetCursorPos
BeginDeferWindowPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 53KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ