35f14eabe530d336786bac240c717a6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35f14eabe530d336786bac240c717a6b_JaffaCakes118
Size

25KB
MD5

35f14eabe530d336786bac240c717a6b
SHA1

7cdaab8de11becafe755ff098e60fe82e3907770
SHA256

f22d3e364b68c26c42ae57f081bec3183b546a825cd5a799dd30aace20f5ac36
SHA512

6a58f8068630bc4608ae9cd962f2892641357222807599ea6d0b8d8d6f116cefcbbe603619934171dba6599984f1c9988bc382a0a1f06861c23d679cebe44515
SSDEEP

768:rxmWnNKqJgEd4wRejWPYBZs1ijS2lq31M:rxmWNHJR4QeckXjS2li1M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35f14eabe530d336786bac240c717a6b_JaffaCakes118

Files

35f14eabe530d336786bac240c717a6b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

960c97adb9e8ff8d84851b6857627249

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE