2a7f4557e97d812f66d76e00144385f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a7f4557e97d812f66d76e00144385f5_JaffaCakes118
Size

307KB
MD5

2a7f4557e97d812f66d76e00144385f5
SHA1

b29d9dd2794eb7d497c2ce87e533a6db95884622
SHA256

9aea1434a199ad48a9d6ab628a7086e9c8fb8e5de2ab48e1f7754387c17e82a3
SHA512

81359c65eb72df8213098621c6ad5875112b1a8ae4998ed72d4754502e4dbf63fd5f4b58c641c06bfdff82f1a18cde00a2395a5fd9e8a72796ea242d2d1419fc
SSDEEP

6144:eLt1v2Jso+1Y9oD1NhSvk1zo04MhWJeTrcqSMZ8CkVOSeNgH:eLtk2+SD1G0zo0NhgeTr2MZ8CHU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a7f4557e97d812f66d76e00144385f5_JaffaCakes118

Files

2a7f4557e97d812f66d76e00144385f5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1a4f68363ac38fcf8ae88d8cb6e8c0d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc

user32

CheckMenuItem
GetCursorPos
BeginDeferWindowPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 233KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ