ddc2e088a5d2edb249c99e34bf9c3497_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddc2e088a5d2edb249c99e34bf9c3497_JaffaCakes118
Size

168KB
MD5

ddc2e088a5d2edb249c99e34bf9c3497
SHA1

9e3177d6b0f01ddcf06c14e9e07ac2c455bbb516
SHA256

d29c24930060c56cb68153b5b4f212fdaaf60bc12a9ffcfee4d83b4b79913d43
SHA512

7aa305d00e89d3233c09acaacd0ff23fae3edfa0357860b6e233ad52e4b6a22cd74c0df36aed0de9be773674fc25c3dd8dc7d691b84a70cf7b66af641df3aad0
SSDEEP

3072:7zhLu/BNZgB4T1R6IKkFP6eWpSf2IWZk8QvJEaoydKcK3g66VJaEUzUbyu1G:7lLu/BNZgCT1bngv4f2M8UKa/K3g62sJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddc2e088a5d2edb249c99e34bf9c3497_JaffaCakes118

Files

ddc2e088a5d2edb249c99e34bf9c3497_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b24cee8c939825a8551f25ed6a0d3c59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
CreateProcessA
GetLastError
CopyFileA
LoadLibraryA
SetLastError

ole32

CoInitialize
CoCreateInstance

user32

GetParent
RegisterWindowMessageA

advapi32

RegDeleteValueA
RegSetValueExA
OpenProcessToken

Exports

Exports

QuickobjLite

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 593B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ