03a1a00ab094ec9d9e152d76efda6cb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03a1a00ab094ec9d9e152d76efda6cb5_JaffaCakes118
Size

49KB
MD5

03a1a00ab094ec9d9e152d76efda6cb5
SHA1

621aa0d8822cf2d9ba44ddf05648583c0d7963a2
SHA256

b15aebc7e6ff37f3078715a8e53f615a0a392618b540d59b7c23c5152d87419e
SHA512

adef4a3862777aec8a037d2331ba60f5e2e2e7901c9262be5984c7df905d0674ae59de276c430a018ebbaa922d7f4a2cc73812dc768ece1e7c5f457779f3254e
SSDEEP

1536:BfQAl+7ovO/oEbFEgCC1MBwT5OunOqBE/zCfy5:dQAl+pgAhEwTUunLEyA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03a1a00ab094ec9d9e152d76efda6cb5_JaffaCakes118

Files

03a1a00ab094ec9d9e152d76efda6cb5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d789bbd14d9363f075bb8a0efcaa628b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

time

user32

UnhookWindowsHookEx

advapi32

RegQueryValueExA

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE