de22962f5d71df3c2e7f08ab9a8db0be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de22962f5d71df3c2e7f08ab9a8db0be_JaffaCakes118
Size

98KB
MD5

de22962f5d71df3c2e7f08ab9a8db0be
SHA1

7244544de6ffd4ba9f82d4b412118c89e3bab989
SHA256

8afa074f63aa075ba7af024196570ae5b44a49640677db89a2454418d9fd1905
SHA512

f5bd2a3e5be7a9ea6a8c9540812dad4e37568b6a2ff1fa28572858d81ef52f250db50d3f7e3bb24bd699b70906e778a2b721f0faf074ef85bd4823389e126228
SSDEEP

3072:paBdaMKcfxQ4pTjkTRxI8NLJRgdkWGqzjTA:KdXfxhTIrI8N181Gqz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de22962f5d71df3c2e7f08ab9a8db0be_JaffaCakes118

Files

de22962f5d71df3c2e7f08ab9a8db0be_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f1015a99bc20a3562729eb637c0602ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapValidate
HeapCompact
CreateTapePartition
GetTimeZoneInformation
GetDevicePowerState
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess

gdi32

MoveToEx
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
DeleteDC
GetStockObject

Exports

Exports

vyaokku

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ