d1bd1bb5cd06e0e576582feda5a8bd0b_JaffaCakes118 | Triage

Sharing

General

Target

d1bd1bb5cd06e0e576582feda5a8bd0b_JaffaCakes118
Size

24KB
MD5

d1bd1bb5cd06e0e576582feda5a8bd0b
SHA1

e4722fc20d4e05605c9711a5f9bf6c2217cb6815
SHA256

101e4cb078a10eadde0cea41607d2d22053df490b09bdc0951bfa004521f384b
SHA512

495af30d252de186b23ac7c2c6cd44a23fa523a2df35287a70393356a4503558778258a9ae8b30972d839d136ff0b997246daf19eaa2fb6d4a289f1ab0fbb2a2
SSDEEP

384:peDTS++MUiQ+dPwKQspcu2is+nwwZZYzFY/j3Obysdm5pwFLUTDlyuU:peDWdMG+pwY12i3YO3OusEpwhUwl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1bd1bb5cd06e0e576582feda5a8bd0b_JaffaCakes118

Files

d1bd1bb5cd06e0e576582feda5a8bd0b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

960c97adb9e8ff8d84851b6857627249

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE