701af6389f4b840d5ce651cd08b947c0_JaffaCakes118 | Triage

Sharing

General

Target

701af6389f4b840d5ce651cd08b947c0_JaffaCakes118
Size

31KB
MD5

701af6389f4b840d5ce651cd08b947c0
SHA1

90bd7cb0c0f4b7a2e9fa660432f2aa156d04adaf
SHA256

ba291b7d4f9fb7f7cf68507d2f61f142a9b5ae1f957fea4e8fbb078bcbec52dc
SHA512

bbcb242287e4198387e6cfacf9a61b7b4cddb96bfa0cbb7c331753722fa7da5df4b529d709f6abb5bcae4a4c7f75d109437af4fdd4487482deebcabbd560c6c7
SSDEEP

768:dpEQCmn16vGHOYxIzCrBWWp+RIzdXCHXJqnt7XxdbwiP:dgmdlxnUa+RI1ww1nwu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
701af6389f4b840d5ce651cd08b947c0_JaffaCakes118

Files

701af6389f4b840d5ce651cd08b947c0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

685eb9304c5d79be74ae8d8e1668bb94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

FindWindowA

ws2_32

socket

msvcp60

??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

msvcrt

isdigit

opengl32

glColor3f

Exports

Exports

CreateInterface

Sections

.text
Size: 26KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE