42afb93e72b6468339758ca42ecf5a1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42afb93e72b6468339758ca42ecf5a1a_JaffaCakes118
Size

2.4MB
MD5

42afb93e72b6468339758ca42ecf5a1a
SHA1

bebc48c230d40adc9fb9955517f5af9e16e05353
SHA256

752fe537077ca6fc2d75e6757f6b3c0dfecfedfdeb09e4f6217fe14cc7f5caee
SHA512

04c0705bdd23811fdb10353ba9775fb98aa6e8340fff8352e6870c24f8247087de35c52d66ecd67c970a6e42319f2005facf2320961bac1a85cc5e2257534bf1
SSDEEP

49152:wdkeLCAGLcWsV5AHHYHAEpvkoRR8iFQfPu70mVZNGnM:wdkeBYcWs0HHWVxJRlYm0mVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42afb93e72b6468339758ca42ecf5a1a_JaffaCakes118

Files

42afb93e72b6468339758ca42ecf5a1a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ