778b64f976b06b9efdc7f484a6dcd962_JaffaCakes118 | Triage

Sharing

General

Target

778b64f976b06b9efdc7f484a6dcd962_JaffaCakes118
Size

10KB
MD5

778b64f976b06b9efdc7f484a6dcd962
SHA1

47bceeb26eedb435164f2f5fc1edf7b8db170539
SHA256

4103c4d4931b3f54f6924144f21ae321a281f87d851eecaf5eac67b817134e66
SHA512

6500ecf4b9c2347cbb897d5ce4e250d83802e30ba741d4fce579ab1ceab000d624aa74c46b2fe32e30a87e4475cace561dae3074ee30a058a670970dd3ce1872
SSDEEP

192:erTGBDhbBx85LZD5ZGdLsz+gJHJAyZJg8D0KThxA+rAQE+tnJiO5:er99JpJgLa0Mp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
778b64f976b06b9efdc7f484a6dcd962_JaffaCakes118

Files

778b64f976b06b9efdc7f484a6dcd962_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bc7b19e4d41d802dbc97ff4e8fbe48ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
GetProcessHeap
lstrlenA
lstrcpyA
HeapAlloc

user32

wsprintfA

Exports

Exports

DLLInfo
Decrypt
Encpass
Encrypt
LoadDll
UnloadDll

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 403B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ