49a5578e4cd5db3dbbf744fa8d227513_JaffaCakes118 | Triage

Sharing

General

Target

49a5578e4cd5db3dbbf744fa8d227513_JaffaCakes118
Size

105KB
MD5

49a5578e4cd5db3dbbf744fa8d227513
SHA1

ee2590cc569046bc1e67f1f5e54d0d23d5b3b34e
SHA256

63a2a612a0faad26b48e2773bd5de3ad88a3d060de6ec45d855f464a19c583ad
SHA512

a88a926b100dfdb080ee984533bc1d768d1575112159b2665ad3154052502a0380ed0e1f32b13a3db065b74e0fe4fd4bb33b9418c51a8e3c30a6a4c8d16f555e
SSDEEP

3072:DiMEw+g1peZ7zsfjgZjQC2Sz7zMErS5KMe4t3i:VKqQR0cZjPz7zMEruKM35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49a5578e4cd5db3dbbf744fa8d227513_JaffaCakes118

Files

49a5578e4cd5db3dbbf744fa8d227513_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7475697cf1dea9b402f23a6bfa833be4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
VirtualFree
VirtualAlloc
LoadLibraryA

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 73KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ