3196388c0ca56a072ff0feca22afd334_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3196388c0ca56a072ff0feca22afd334_JaffaCakes118
Size

82KB
MD5

3196388c0ca56a072ff0feca22afd334
SHA1

0e582efbcc63977df94eeca0edf6180295d9f054
SHA256

8eb87062de8ef3e0efa706b5bd2134435b8f8c0446b29d7f4f52bf1bd9981377
SHA512

2b637cd49c743b869d942add186313250080dc2d6a7d1cef7d991f3aaed67989ec41c062336222b883de182fff61c07f170381aec0c5aa9a0cac5a7765251a28
SSDEEP

1536:HNIR5KyVybtoDkhEDTyl+8Y3AvTOmD4CRU8DS1/X1VG9Tys:OPybt0Bi+P3IOC46S1/XWhys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3196388c0ca56a072ff0feca22afd334_JaffaCakes118

Files

3196388c0ca56a072ff0feca22afd334_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ee2bf920917f70362b3e8f39d6bc150a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
LoadLibraryA
VirtualFree
GetProcAddress

user32

BeginPaint
GetDesktopWindow

gdi32

GetPixel

Sections

.text
Size: 47KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ