d155a2f0cfe377d7baaec10bc6c8d1da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d155a2f0cfe377d7baaec10bc6c8d1da_JaffaCakes118
Size

307KB
MD5

d155a2f0cfe377d7baaec10bc6c8d1da
SHA1

fa0600f242f013606c4cdfea5b3c47de2995aed9
SHA256

1dbb7012fd10f1325d5b0e8704c5eec219c65d456f2103d22b9053da8eebf410
SHA512

254b21a493c89cfc30637502a591e1b42c7c641a05dddac6bda1e05961f9acf6ccf83f78c31e8435acaa4120a1dd7977166939180c15badff1d213c9238af5da
SSDEEP

6144:4huR7K+Ltj+th2xNs6nVfZdv+kbOufK7nXxMK9QCutSeHWw1R7huvUh9jqMb:OuR7K+Ltj+qHs6nXaSaQCu3Hh1RVuvUZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d155a2f0cfe377d7baaec10bc6c8d1da_JaffaCakes118

Files

d155a2f0cfe377d7baaec10bc6c8d1da_JaffaCakes118
.dll windows:4 windows x86 arch:x86

88b2be634d94e89de38cd5a5cff6cede

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualProtect
VirtualFree

gdi32

LineTo

Sections

.text
Size: 231KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ