353d6a9e01dbc8083eea57afd577824c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

353d6a9e01dbc8083eea57afd577824c_JaffaCakes118
Size

147KB
MD5

353d6a9e01dbc8083eea57afd577824c
SHA1

611366ca73f9cd5c426e3944905fde2cfbe62863
SHA256

1804e2ecb8fa41b8d09f61f7651078cdbdeb6c0a93cc820f4052916325f152fb
SHA512

17d97bcceacb021f5874697c65dc835c2e9eeeea1335e587bef04f210eea6b51ac5305d46f0b1609cee9b2147b48ffba116549eeb56a927bc568d94524f048d1
SSDEEP

192:rDKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSFNnj:rViJrtFRdbmXK8+PCwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
353d6a9e01dbc8083eea57afd577824c_JaffaCakes118

Files

353d6a9e01dbc8083eea57afd577824c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE