da82f0f9b919771e242a616caa4a4fef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da82f0f9b919771e242a616caa4a4fef_JaffaCakes118
Size

24KB
MD5

da82f0f9b919771e242a616caa4a4fef
SHA1

451cb0ac9a58e4b4eae11073c75e2a89d23e8b18
SHA256

426200df86506d06f70ec5c4a123656dae5b4448cdf784deaa4b7e9ac45cac77
SHA512

3a7cb84758ddb23bc1c0242692bbb166efe8d4fc8a0995c6447dfce8be9f47f77cb1257f275efc92dffaf94858a8d73459eb8d8a09d47ceabbae81b3cf9ceded
SSDEEP

384:ARY+0K4vBCM3e3If92x3dRMdleUAqRmWgbP909dkSRDW3a6m+NqZLC5N:IY+WBCM3uyNrAqRmWgbFidbRDW1MZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da82f0f9b919771e242a616caa4a4fef_JaffaCakes118

Files

da82f0f9b919771e242a616caa4a4fef_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4ff585327cc1c08c1204e3ea9d11a05a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
LoadLibraryA
VirtualFree
GetProcAddress

user32

GetDC
GetDesktopWindow

gdi32

LineTo

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ