7499dbad37b85ed9b365ea3991441b8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7499dbad37b85ed9b365ea3991441b8e_JaffaCakes118
Size

309KB
MD5

7499dbad37b85ed9b365ea3991441b8e
SHA1

fbdcc37f134a26d3de07834fe0343026afdf8038
SHA256

b19a4f36877d24c95bb9231f6179e2114495291e1498614092760af1969d7240
SHA512

7e6bd6ce38e36f095ed6a27289d9c7ac1aeb6c09bfa599e9a0f106e5c0faa7df10b7cadd6c9047feff8e6dfaccc5101b50f03c80190832735171a283bd08b55f
SSDEEP

6144:5jCvePjMD6ub4HFdswg4CXq5ERdCHmvMIUC62azHJRjPu33SKUNn:5jCvePjMDaldC4SRMGvR65zHJNunS7n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7499dbad37b85ed9b365ea3991441b8e_JaffaCakes118

Files

7499dbad37b85ed9b365ea3991441b8e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d58f292ffbd2b00fa779d18e5aac719b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect

user32

CheckMenuItem
BeginDeferWindowPos
GetWindowDC
EndPaint
GetCursorPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 235KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ