474760fe8ebf5733c4076b85eeb1aa65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

474760fe8ebf5733c4076b85eeb1aa65_JaffaCakes118
Size

109KB
MD5

474760fe8ebf5733c4076b85eeb1aa65
SHA1

147181e11dcbf4150c5cc921f3468ad3b078ebe3
SHA256

83cc04b46e8b0327d39947b4da21ddfc5e6c932479593ee7c3b2d6ec00907c40
SHA512

cc80de30380a814bf5cafa838093f6255ae193bdbeb8918110a120a4eebaa8e7c8476f484f138a5ba66405b10d630c714275fb55fd5162ea7dacc74d0947c696
SSDEEP

3072:wufzS3abxvbntsuUNnjZ59FARyp9i5n8tq4f:bfzpxvD1UbFAo9OKqw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
474760fe8ebf5733c4076b85eeb1aa65_JaffaCakes118

Files

474760fe8ebf5733c4076b85eeb1aa65_JaffaCakes118
.dll windows:5 windows x86 arch:x86

88d8a4a9c21e345682f6b1fac45c4679

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
MultiByteToWideChar
FreeLibrary

user32

wsprintfA

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ