aba80696d37261cb289a0dfc8867cb0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aba80696d37261cb289a0dfc8867cb0d_JaffaCakes118
Size

82KB
MD5

aba80696d37261cb289a0dfc8867cb0d
SHA1

d350ba38c3974a7addd33d3a4cc265810e90aeea
SHA256

9a74adf834536e28ee4042840c95b92144dd251d9dbe6c728fbaeb1dada21b3b
SHA512

75d2de289aae66edcffc35fe15f9b13ec444ab6b6cf0dc2b831eb1b92e889d799fb73e1624254bdd33542fb248f8573e5974422b890455d870c722a4a1935145
SSDEEP

1536:lLddzQD4KeBg+LQz1jPqFGZa5hU/H3HY04uf9FNAdBvH:lLg//x9Pqh5hU/H3HYXufnOHvH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aba80696d37261cb289a0dfc8867cb0d_JaffaCakes118

Files

aba80696d37261cb289a0dfc8867cb0d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4ff585327cc1c08c1204e3ea9d11a05a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
LoadLibraryA
VirtualFree
GetProcAddress

user32

GetDC
GetDesktopWindow

gdi32

LineTo

Sections

.text
Size: 47KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ