da3fb8eb0f52159019e6e790af00e69b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da3fb8eb0f52159019e6e790af00e69b_JaffaCakes118
Size

45KB
MD5

da3fb8eb0f52159019e6e790af00e69b
SHA1

438170c1817beab8a5ab392e883fef52598046f0
SHA256

1424fd8d8c960d5240b5e3044e504ff3d1b31d90c254aa0bc083eb09e58f87f7
SHA512

72e072a20dce9d06cbc7d5f4b451faa1d9c654add91f85c9a4509aff37b34b828e27e2d7ba5bd5c2c77bb87114b52c74089cfb746c28963fd66f11787081d104
SSDEEP

768:Wmt8uznyAqsOc2ncuJA9tU927k8AEWBm7wrIUVtbAJpVNFZxY2:NbGrcw+ZCbg7wrvVhA5PY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da3fb8eb0f52159019e6e790af00e69b_JaffaCakes118

Files

da3fb8eb0f52159019e6e790af00e69b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

5544a558178895c012502baa823128b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

connect

advapi32

SetSecurityDescriptorDacl

Exports

Exports

start

Sections

.text
Size: 39KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE