8302ec74778910cc668e4e98238ef3db_JaffaCakes118 | Triage

Sharing

General

Target

8302ec74778910cc668e4e98238ef3db_JaffaCakes118
Size

51KB
MD5

8302ec74778910cc668e4e98238ef3db
SHA1

bf2442a1f42d7f1ffcebb8d9ba6594e9aca75a0a
SHA256

640c5e2f504aa8cf4c53b2de95ec434820ddfd6c375d483148a9cc51b64df684
SHA512

baebc9d406c1f89519739b71f0ec6d68362e9a8b96abcfd0ed9cc6230b4f23fe1a18a5e624c52bf85478b24d6ba9f8a2153825033ea0c44249aa66f15aba2065
SSDEEP

768:tcVrzFuu55oaY2lnqY7izZddmYM/YI5Bvc/hNhwcllMylhgLbKSiGuTc:iFzN559FOPSYILAwUlMagKcf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8302ec74778910cc668e4e98238ef3db_JaffaCakes118

Files

8302ec74778910cc668e4e98238ef3db_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ed07c85613693a6fc23dd15c1255325a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_strcmpi

iphlpapi

GetAdaptersInfo

gdi32

BitBlt

user32

GetWindowRect

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE