bb53cba92419572e30e842fa044a4e46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb53cba92419572e30e842fa044a4e46_JaffaCakes118
Size

308KB
MD5

bb53cba92419572e30e842fa044a4e46
SHA1

1b9f559e4bbbf3af85ced4ffce2fd8b0b1193232
SHA256

ce6968ca2c4f9f57cad516871e8efc752983908964f05207cc9d4387435efda2
SHA512

e866ef1e934e35bb274bcfb7b07bb81249f7f84ade9eb781bb26c45c1457986eb4bda53c20f5c3c6e24d75f2fafb5985ff33f7fcf8e37666a27941b8541177fe
SSDEEP

6144:tlmkyLXrXZZToyVRDG1LIpv33RIU595aV8p3rQLSoVY3EW9uvfNoa4Rr:tlmky/pZ0+GWp/3RIUPFrQLzwEQuvJsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb53cba92419572e30e842fa044a4e46_JaffaCakes118

Files

bb53cba92419572e30e842fa044a4e46_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1a4f68363ac38fcf8ae88d8cb6e8c0d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc

user32

CheckMenuItem
GetCursorPos
BeginDeferWindowPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 231KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ