db3278b65acb71dab1fe8c95b2ba48a6_JaffaCakes118 | Triage

Sharing

General

Target

db3278b65acb71dab1fe8c95b2ba48a6_JaffaCakes118
Size

208KB
MD5

db3278b65acb71dab1fe8c95b2ba48a6
SHA1

bb17871a8f6ba97d2b1984fa5c0e6751d9913bce
SHA256

b1dc297be1e39f9671b834590a87be6ffe86e2acf43116b832d14179b4d20a83
SHA512

cfa1dba2c63b3caebcb840a8696fa41d8d633047b6ef67ee7fa3e24c5d5c3b229bdb8c6e2926e22bdd959f80e5510c8efe18b9a43bb9e17015d536c1b60fda2c
SSDEEP

3072:feYIk06K8pWrwyyotHqXL7JGxqvkUmpKsoXbYYGvSaJxB1lJYtDxOaH:2Yp8r5Xc77fvk1puXbQbxB1o1xj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db3278b65acb71dab1fe8c95b2ba48a6_JaffaCakes118

Files

db3278b65acb71dab1fe8c95b2ba48a6_JaffaCakes118
.dll windows:0 windows x86 arch:x86

391813bdb013a66c7dbc627daa97feb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

user32

SetWindowTextA
MessageBoxA

ws2_32

closesocket

Sections

.text
Size: - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e20
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.e21
Size: - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e22
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ