bda4248d809c08975b552a16d5aeaacf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bda4248d809c08975b552a16d5aeaacf_JaffaCakes118
Size

23KB
MD5

bda4248d809c08975b552a16d5aeaacf
SHA1

86ee5a4b47b5677da60c132978f1828bdb050d03
SHA256

b4b049b5a59b33b8e7aa71f4d3cc501e664c73d08ec46ceb236c8dfc9c460c6a
SHA512

5b134b4d1bc94c9051d6ed596ff7a3d842292a6425f8116cb0f37ceff3cc44863539b024d428400a13dfe8a75373d4122f0296f02ab6a5a46b84579d9a232630
SSDEEP

384:MtDcObpBYdkSg8iULKiw138q8bmKas+/IiqF98vxUQnjAU:MRcObpBKk+RLKiwj0mKa4fFyvxZn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bda4248d809c08975b552a16d5aeaacf_JaffaCakes118

Files

bda4248d809c08975b552a16d5aeaacf_JaffaCakes118
.dll windows:5 windows x86 arch:x86

7632b18a88b6df43ae18e3614ca026bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
Sleep
lstrcmpiA
lstrlenA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
lstrcatA
CreateThread

Exports

Exports

Load2Graphic
StartVideo

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ