d70f577662350198c8005eb09581e3c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d70f577662350198c8005eb09581e3c8_JaffaCakes118
Size

86KB
MD5

d70f577662350198c8005eb09581e3c8
SHA1

a3f7ccf681c1f58d1bc03d9d8022a226711fde46
SHA256

412c6ef64daa47c458f57a47889c37acc26b5ee3b04d0c40ad45d405478ce659
SHA512

4924cefc402d18a49e6ff0c03fba1566ff66e5fc51e2a8aad11aa28f6d7a336caa520658304d50cc49855a870f8ff812625b7445ea7c28e8903aedf606ea537d
SSDEEP

1536:R42hfIoURgan3Ezb8rLePyPYrRXKLXjOpRfY+TiOelxrKr2f9nu/zTOmhc8zQ/h:lLQgC04ePwSrMrTVnu/zT/zQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d70f577662350198c8005eb09581e3c8_JaffaCakes118

Files

d70f577662350198c8005eb09581e3c8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b2f4b6276573bc2c9e18851d4d6ebc9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA

gdi32

CreateFontA

opengl32

glEnd

user32

GetKeyState

Exports

Exports

CreateInterface

Sections

.text
Size: 84KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE