bb4d70c74c9c1460e3d5f437a4428230_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb4d70c74c9c1460e3d5f437a4428230_JaffaCakes118
Size

68KB
MD5

bb4d70c74c9c1460e3d5f437a4428230
SHA1

51bdc6316cb0107e2b1a72ab8ac6ac11f2888c46
SHA256

4968a070af301d7b695e1948dab88662b195687f37c10b2d174d03a55b622659
SHA512

b755adacd1384c6412c805d1235873507988faea090775d20b61a7cbb9a1c6c3e190a47ec8362cf2a0c0feb94a1d121e15a39689ab76db6d5239ee8725a8d2de
SSDEEP

1536:SeUQVdsdKJbiIVO/6eRIM1osEaX7Rlifg64b6+JP4YrrzoAE2:wMdsdaGIE1sidlipy6Wtzop

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb4d70c74c9c1460e3d5f437a4428230_JaffaCakes118

Files

bb4d70c74c9c1460e3d5f437a4428230_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5c213538132a4ff59889f65addddcf2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

PostQuitMessage

version

GetFileVersionInfoSizeA

advapi32

RegQueryValueExA

Exports

Exports

ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite

Sections

.text
Size: 61KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE