0478bb5b13973508499ee1673e59a6af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0478bb5b13973508499ee1673e59a6af_JaffaCakes118
Size

310KB
MD5

0478bb5b13973508499ee1673e59a6af
SHA1

4ce2157e7ecdd734d607a421a4161d93b163d7e7
SHA256

ed80dd71bffb60fa09e768787019fc820223856249fd9cb699885d71caf78b85
SHA512

6c27632a7566936ac2f59847a142ecce8b4fb22044e48560417e05ddfb5686c5c49706c7ca39b3c1c770a4628996f7ad849b43c60c5e01ecbbd696d9e8df2224
SSDEEP

6144:8oOFjIqv157AoqWyxgBkS0O89IFkkZlZ+udfZjkH6op6PDed/s1+Yzc9ddA:HE7Ao8TV59A5lBSH6g67edmI9fA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0478bb5b13973508499ee1673e59a6af_JaffaCakes118

Files

0478bb5b13973508499ee1673e59a6af_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7522d1236dcfd7094a93fa6d626bbb72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

BeginPaint
GetDesktopWindow
PostQuitMessage
RegisterClassA
ReleaseCapture
ReleaseDC
SendMessageA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 147KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ