befaa8d64d7dc0f61ec5fd7949c7c8c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

befaa8d64d7dc0f61ec5fd7949c7c8c4_JaffaCakes118
Size

68KB
MD5

befaa8d64d7dc0f61ec5fd7949c7c8c4
SHA1

01efd690bb21959cc19a3220fab723d3d83d6fdf
SHA256

ecb37a54a975d3016ea996b3ecbe555ece36f1184a1c8720062e5185cda5dbe0
SHA512

9ec917bd5708f1da0249565ef347d2cb1b05cffdfe00fb210c00d153c09e8c46d7245270843658ccce8ef092ecb0393e12cf1736d05e393ed5cb8ab2fdd5acc3
SSDEEP

1536:uwoq+LsVXPTtfZ/SVbqWD00g93UJV5qQM4Yfgpofk2ow5EEtBC:hN+oVXFZ/SVbqWg0gyJzRM4Yfgpof26S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
befaa8d64d7dc0f61ec5fd7949c7c8c4_JaffaCakes118

Files

befaa8d64d7dc0f61ec5fd7949c7c8c4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f6372546361ed1ca3457e353ab257a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_stricmp

user32

GetWindow

gdi32

DeleteDC

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE