e208235b81310bc89cc3a36ea92c1f8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e208235b81310bc89cc3a36ea92c1f8d_JaffaCakes118
Size

1.3MB
MD5

e208235b81310bc89cc3a36ea92c1f8d
SHA1

ed447879d9c45763a07cd714d21d4b9a37173c42
SHA256

3e392413010dd61b17f67d18fe888b89088d3e753b94dd1d7c0c409885dd9b23
SHA512

c6cb6abe3c6bc5e8723db3c24b38e21fa539e188e03c7456a92c13e75233c3ececd412484562061802db319e8e2a50f3095aad4e05e486f07946f512863a60ce
SSDEEP

24576:OUfc1TA381w6LeEHXA1T6JOF8JtxC8WBiM7l2+l31u:OE6THLnQNDF8JHa7l2+l31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e208235b81310bc89cc3a36ea92c1f8d_JaffaCakes118

Files

e208235b81310bc89cc3a36ea92c1f8d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Exports

Exports

DllCanUnloadNow
DllGetClassObject
IAlloc

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ