d2cf0dc0081582854629d56459dc7374_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2cf0dc0081582854629d56459dc7374_JaffaCakes118
Size

25KB
MD5

d2cf0dc0081582854629d56459dc7374
SHA1

e0c0a8fae2505a82d39aca9bb3ae0b1ef35b1c62
SHA256

ca58bad805415df7c5ac7dddf710a789ad9b55d1040569a6b815036bcb29d0aa
SHA512

a74e8eedb3b0d88d2cb38c36ad273eeb84d43f7ba750fb41aac95ae3aea06400f9aca3081c565ff368408f23de6eeaa26c2373461e2695f4b0d3856863569af5
SSDEEP

768:ps6RCgmWBYJzgR1mOAWoKnP4SzTAz1xCE:O6885EW4k83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2cf0dc0081582854629d56459dc7374_JaffaCakes118

Files

d2cf0dc0081582854629d56459dc7374_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b843944ace23453d54c976b6bfe95c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

MessageBoxIndirectA
BeginPaint
DispatchMessageA
GetDesktopWindow

gdi32

Arc

Sections

.text
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE