d0a156e09c308c111f562af03782ec0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0a156e09c308c111f562af03782ec0e_JaffaCakes118
Size

22KB
MD5

d0a156e09c308c111f562af03782ec0e
SHA1

14d7c618977d3e48c9574ce729359f6128af528d
SHA256

d49e303e9f1bfd6acf2d36c2bd7f6bcbff7fd51e6a2d4a5eceb518e9fcaf41e4
SHA512

aa3e28237d6d1b4460d13ccd029dec042adf0feab53fcae9addd7f87c458a85844122e9d2189672cc1c650b3474a16b8f874b100880ea5baee5d01d51c8d436a
SSDEEP

384:8BwgKpNalAgPBhIMsK1Atfs6ASN0WR8Q6tq0AaebhXFLScQ9ac:TzbaZvIMsKQs6R0hQ6th5ebHLScQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0a156e09c308c111f562af03782ec0e_JaffaCakes118

Files

d0a156e09c308c111f562af03782ec0e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9f76c9faf41fb9794b73a08d5a39fc39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
ExitProcess

user32

GetDC
BeginPaint
TranslateMessage
GetDesktopWindow

gdi32

Arc

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 16KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE