3c5b567eacb73d4ac1b1c268955ac1ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c5b567eacb73d4ac1b1c268955ac1ed_JaffaCakes118
Size

88KB
MD5

3c5b567eacb73d4ac1b1c268955ac1ed
SHA1

3f940543d3411be33904d90d97d59da0875603e4
SHA256

401b09ee58e000a6618667aff29888eb5996ad21178d18d6ea2f819c13e895f5
SHA512

fd6ad47d0dd6d91503121ef2e012b10d85fecb21654c0d416d263dc8009469168106197497274dd99bf96006063d817107c1c411b6e97f6160804ea8ebffc76c
SSDEEP

1536:CUZk0bZUVzXcsbVC6ESS6YopPzGl74WoxfymMvrCwUxOdPYKM5Z:CadUVz5enKSlsWoxVxxOdPgD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c5b567eacb73d4ac1b1c268955ac1ed_JaffaCakes118

Files

3c5b567eacb73d4ac1b1c268955ac1ed_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d0801690c506af4acdea5b312433f4c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryA

user32

GetDesktopWindow
GetDC

gdi32

LineTo

Sections

.text
Size: 54KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ