a741eea4ba8dfa55cd6e9b7c9e0172f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a741eea4ba8dfa55cd6e9b7c9e0172f6_JaffaCakes118
Size

66KB
MD5

a741eea4ba8dfa55cd6e9b7c9e0172f6
SHA1

ea855a4ddb547c6e17755b66a885675a710edeb3
SHA256

719e326a92710afb868d1be0ee9f05e783c6ded94d80aab2fc019e694eb21c09
SHA512

d2bf29b44505abb58d5e15ac6c721afe21eb12cdbfa394e947936ca62182aa042baf02b858f11b769c5a753074233e75f7ba4250d2771143badec52287479fec
SSDEEP

1536:uvbRiV0uSAO2a1fpcvc4C08agsftHf5IGTKYwHOV5M:mqSAkYE4b8kcawoy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a741eea4ba8dfa55cd6e9b7c9e0172f6_JaffaCakes118

Files

a741eea4ba8dfa55cd6e9b7c9e0172f6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7484d55e4c6d3e3283d21bc9846ca468

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

??2@YAPAXI@Z

gdi32

CreateDCA

user32

wsprintfA

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE