de8fed3f9ca8629bed645e02b93c3b02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de8fed3f9ca8629bed645e02b93c3b02_JaffaCakes118
Size

15KB
MD5

de8fed3f9ca8629bed645e02b93c3b02
SHA1

07f7240697b82160ef8459a0396b7697930249e4
SHA256

dfebab1d5a33347fc2eaa9dd73cfff250a096405d8b295b95a3cee7642e51624
SHA512

ba07ad65a52c2262c72e7670f64f0e180270023ab9e065fc2348c935de8392f734c938ed0e5e94e3165566d88d353e1446f7a7948d15ef773f5ce1e141397897
SSDEEP

192:thyJgL2gUt/pcZRE564w00PCqcQp857nY3ox3Ahw2TnEzWCrxT2j09j7bJTL5ODx:zyJgL2NroRE564wbr2AS2TnEaCa0JhV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de8fed3f9ca8629bed645e02b93c3b02_JaffaCakes118

Files

de8fed3f9ca8629bed645e02b93c3b02_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b25799a703c382b634c5f98ea174e084

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
HeapAlloc
VirtualAlloc
VirtualProtect
GetFileSize

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage

Sections

.text
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ