b70957254dda687e9b1d6d619beea1d4_JaffaCakes118 | Triage

Sharing

General

Target

b70957254dda687e9b1d6d619beea1d4_JaffaCakes118
Size

55KB
MD5

b70957254dda687e9b1d6d619beea1d4
SHA1

19797e99128dbfe159201ca01ba25555af3b6fb5
SHA256

e750ea6095016d5ece599e2992d4f852a0ae0caa9f2f412f6a91fa63cb016b17
SHA512

5ab6e8a2796b55efedb907d27cb539a06a2af58d251ecdcde6d1271fee3eef5f41a7ec20197a396b1a24e8f38a0386e5a689f25c66e3e4bec2a1489504572ebe
SSDEEP

768:8fVORdyu9xV3gL9sjQd1ePkDN/SXuClTt9+c0GbD8hokZD2JfYHMnRRaI:sWL9djQne8DRSJlTt9+bY/ktY/RR7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b70957254dda687e9b1d6d619beea1d4_JaffaCakes118

Files

b70957254dda687e9b1d6d619beea1d4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Exports

Exports

WSPStartup

Sections

.text
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

plaof5tc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

i33xtgnb
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

43la9rzo
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ