059417e209aaeeb3352d8fc961c5b7ba_JaffaCakes118 | Triage

Sharing

General

Target

059417e209aaeeb3352d8fc961c5b7ba_JaffaCakes118
Size

70KB
MD5

059417e209aaeeb3352d8fc961c5b7ba
SHA1

56c0e961d1495ab25650d3a6eb957cb7d1803fb2
SHA256

fc91a302e55a8c4ea2845de6b0148dd28025bad2a5efcdc1d7d17cacde40c41e
SHA512

7d13eed031d197f61ad5837080ac39d2029178f65cf2696189af02d56762eac7d6932b6860c3278a466c25b65169c51ef8de5a50082647d5e611e8d29360f607
SSDEEP

1536:iXAqSRWJCbZbx3Npfuinh0/1TRk42NJQ7dUTn+89Qr5GwctF:iXQRWJCbppfbnhA1TKPNJQ7m+ZrRcD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
059417e209aaeeb3352d8fc961c5b7ba_JaffaCakes118

Files

059417e209aaeeb3352d8fc961c5b7ba_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9e2d3c6fc60b108983423bbc5be605da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualQuery
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetWindowThreadProcessId

winmm

timeGetTime

ws2_32

send

msvcr71

_CxxThrowException

Sections

.text
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: - Virtual size: 788B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ