360df9fdbf2eea5dca44dbd73475f467_JaffaCakes118 | Triage

Sharing

General

Target

360df9fdbf2eea5dca44dbd73475f467_JaffaCakes118
Size

307KB
MD5

360df9fdbf2eea5dca44dbd73475f467
SHA1

4ab5e0be2ab6fecc4484f5f996cf8cfc4fd99c0b
SHA256

77624548cf329b8902ea12f50c68e105aa18fe365a79009fba72261843fb5472
SHA512

e143d4428ba0511939440246f5a2b386e6a7ccf8520a834cc38d118635fde1099068a33dfdd372b5d94d4c20df8331556e3e005dc1943f1d5bddb8acc2eb15c9
SSDEEP

6144:eLt1v2Jso+1Y9oD1NhSvk1zo04MhWJeTrcqSMZ8CkVOSeNgt:eLtk2+SD1G0zo0NhgeTr2MZ8CHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
360df9fdbf2eea5dca44dbd73475f467_JaffaCakes118

Files

360df9fdbf2eea5dca44dbd73475f467_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1a4f68363ac38fcf8ae88d8cb6e8c0d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc

user32

CheckMenuItem
GetCursorPos
BeginDeferWindowPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 233KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ