ebc392a026df2d1812e73e760a4f2da1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebc392a026df2d1812e73e760a4f2da1_JaffaCakes118
Size

60KB
MD5

ebc392a026df2d1812e73e760a4f2da1
SHA1

4d9303fa66eb8449f50794077711004d572b8ad6
SHA256

d252e2b8c4252aa2361944da963ac7e41a905ab33c09d4f45c82c8afe00637e3
SHA512

beb156a920fd4e3f45c9270ba2e3ab9d19f8ff6877560c530d2f3801a12e663d004f826c3c173b236aef7433b19472fd7ef5b9705911ec37ed15fbd7e35abe5b
SSDEEP

1536:TfD+jSmPCKR7saO6sXEF4nc+ISlOFMIwUFs4ono9xalh7QJcZ:jgSaCpv6hF4c15Znoo9xaXQuZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebc392a026df2d1812e73e760a4f2da1_JaffaCakes118

Files

ebc392a026df2d1812e73e760a4f2da1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

05d7a83005b4b6ff217e8d416171c608

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

ExitWindowsEx

advapi32

LookupPrivilegeValueA

shell32

ShellExecuteA

winmm

timeGetTime

opengl32

glVertex3fv

msvcp60

??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

msvcrt

memcpy

Exports

Exports

CreateInterface

Sections

.text
Size: 55KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE