b8666b9d81e958ffc6cc17a22d01db0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8666b9d81e958ffc6cc17a22d01db0d_JaffaCakes118
Size

6KB
MD5

b8666b9d81e958ffc6cc17a22d01db0d
SHA1

d756a2e3fee6abd776315eef8ac03b4c1e46c675
SHA256

b1bbd88c0dedeb992d51d8f95a6e7b00f53be4907de50c81c4287a981f8d3173
SHA512

c62246531e45e1a56dce1ccc7596cb24bfa296b50c735ccf0157f6060d410019afd38a1445669c31575102f6ca9c15b777563da8cde19a4455c41884be01df55
SSDEEP

48:aGy7MN4cpSGAXbIni1kvNs6ztutiKIZWiwQTnU5WwG2QozbC:xB4c4G6bn1k1sw0EW3enIWwGqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8666b9d81e958ffc6cc17a22d01db0d_JaffaCakes118

Files

b8666b9d81e958ffc6cc17a22d01db0d_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5fff0a73b4734f42a651e889856c031e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msimg32.pdb

Imports

gdi32

GdiGradientFill
GetObjectType
GetCurrentObject
GetObjectA
GetDeviceCaps
GdiAlphaBlend
GdiTransparentBlt

kernel32

SetLastError
DisableThreadLibraryCalls
GetVersionExA
FreeLibrary

Exports

Exports

AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.texc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE