b23fb04700e07e49c718dbc484f06d5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b23fb04700e07e49c718dbc484f06d5b_JaffaCakes118
Size

216KB
MD5

b23fb04700e07e49c718dbc484f06d5b
SHA1

f795622133f98bded2f0ef4c1e495d84f3a6a1f1
SHA256

c8287ff4f4cb9b797efa726aee4bbbc0b2b516b38dfaa3d6830ccf3554a7f7de
SHA512

489515292a47b887fb14184632a1cfe3e181c2c36dfe4622262acd0f662a70c4c788d3d3a3059493e0dd5a4fffb7714a862bb373670405763f68d8ba7e96a8f7
SSDEEP

3072:DoVZ1c+j0S2spDPb4E6beL/8evyvk5irHtciKc/wmm+uni7A2dU4w:sr1N0MPbhQ6i2iKR+hMKM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b23fb04700e07e49c718dbc484f06d5b_JaffaCakes118

Files

b23fb04700e07e49c718dbc484f06d5b_JaffaCakes118
.dll windows:0 windows x86 arch:x86

391813bdb013a66c7dbc627daa97feb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

user32

SetWindowTextA
MessageBoxA

ws2_32

closesocket

Sections

.text
Size: - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e20
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.e21
Size: - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e22
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ