9600f1d67bdeaac757273d3c9075fdef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9600f1d67bdeaac757273d3c9075fdef_JaffaCakes118
Size

20KB
MD5

9600f1d67bdeaac757273d3c9075fdef
SHA1

04b007a89557f99987a63131717cc81457ba76cb
SHA256

c981d3f8e9ab1676a2bed610bcfc2972988800f9414219a3d6bf7d7537587caf
SHA512

afe937db72674269ec6de41e3f8d8db684c72020ccc29cf9f164f25ffd53f25098c781d01d058fbfc9bdd2b9cdbd767080980061677e2919422bc01a34f82dcf
SSDEEP

384:wBoCAtZ3HAmScSVBEGttkC8b6GWSD65TfHCtoRY64:NCAtZ3HWTVVRdkU/Ct7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9600f1d67bdeaac757273d3c9075fdef_JaffaCakes118

Files

9600f1d67bdeaac757273d3c9075fdef_JaffaCakes118
.dll windows:4 windows x86 arch:x86

88b2be634d94e89de38cd5a5cff6cede

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualProtect
VirtualFree

gdi32

LineTo

Sections

.text
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ