a9733cd6f34e2235bb84dca3daad10cf_JaffaCakes118 | Triage

Sharing

General

Target

a9733cd6f34e2235bb84dca3daad10cf_JaffaCakes118
Size

25KB
MD5

a9733cd6f34e2235bb84dca3daad10cf
SHA1

2a5d68086fff9d13e973733f58eb64dc2a9eaa32
SHA256

3ac3876ca9ac36852526f5c7c58ed186433fd89391b57cd07558a8a5b4c4c59b
SHA512

d61e9e70a6e253851c67047bfc6e10e8e4779c7781f6276de25d05d6ac222e9cef5145c699edd368d0ba34548c7928621c01961074667edcf3e87b735d8b0621
SSDEEP

768:IaDrw61SCt5VolxqkTMPGPGPwhqwqPKfjE:Iag6Q2+MPGPGPGqPk4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9733cd6f34e2235bb84dca3daad10cf_JaffaCakes118

Files

a9733cd6f34e2235bb84dca3daad10cf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

18904c7c7f2f0242ba84a0cb624f1726

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA
GetDesktopWindow

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ