bedfbb89b4ed69550f3ab094713afef6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bedfbb89b4ed69550f3ab094713afef6_JaffaCakes118
Size

376KB
MD5

bedfbb89b4ed69550f3ab094713afef6
SHA1

45ee411705553cae729860b1ac4031014f20ce28
SHA256

91d2a681aa93e013de4847395fe159c7dfa0147bec05cf992fee4753635b8ee1
SHA512

5fed5023801c444fb70f5fd9f278dcf57e7bb2b9ab3fa11766088605fcd32c15d1e1c2416caeb5854548b51e2fb8e07388c3a46be488fc3ed6ee0c5a9158c3f6
SSDEEP

6144:WtlH8HLBKM076xJrmQKzfXG6ltGIj5gJ9CObfx1pNLWxeC3ptinXDklxh:0H4LpY+6eIlEJMxexnXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bedfbb89b4ed69550f3ab094713afef6_JaffaCakes118

Files

bedfbb89b4ed69550f3ab094713afef6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

GetNewInf
GetNewSock

Sections

.text
Size: 365KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE