828c31e67b565de8422fbed4cbfefd57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

828c31e67b565de8422fbed4cbfefd57_JaffaCakes118
Size

91KB
MD5

828c31e67b565de8422fbed4cbfefd57
SHA1

fd7a09fb2e0cec8da644a38ab5ed82b01c668348
SHA256

443f3050f0bfe8b480ac910825163ce041e322129569544c891f13b4da58c0cb
SHA512

4947a824b5b0f036308dcaedfb2defd7997118fe3b49c0698108e7b1aeeb6c4448a52c4e6becd7113c386cee7af258196d9fcf0e75705ad2f2725ada7a41cb8e
SSDEEP

1536:7ghPi8W1AevpE4JMMgEWVDiviBrRgxLawvJis6+Hr+LWgIQeE7Zrw5Dl:7Si8sMMgE4HFgxLHosBr+LWb5kVw5p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
828c31e67b565de8422fbed4cbfefd57_JaffaCakes118

Files

828c31e67b565de8422fbed4cbfefd57_JaffaCakes118
.dll windows:5 windows x86 arch:x86

995298fed7c6838a34fc1c09b75f6da1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetFileSize
SetFilePointer
GetLastError
VirtualAlloc
GetModuleFileNameA
CloseHandle
GetProcAddress
GetModuleHandleA
VirtualProtect
ExitProcess
ReadFile
VirtualFree

user32

MessageBoxA

Exports

Exports

VMCALL

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 529B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RLD0
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RLD1
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ