0717cd25982f9bf847a6a6715dab5203_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0717cd25982f9bf847a6a6715dab5203_JaffaCakes118
Size

53KB
MD5

0717cd25982f9bf847a6a6715dab5203
SHA1

5806096010fb8918f89fd7e765c7af84840d872c
SHA256

567ee8c2cf6b7e6cd50d3a211d9910285898b869064f91caa88fee42fca02f32
SHA512

e658dfb3c5641e70bea30ae3c293fc529db1b563a1e1451d734bfb373ba5bb9eff1bb6c3349181c711afca320275023733ecb3060bf451cad651ac1aeff19c0d
SSDEEP

1536:fcZl0PWsvCiO4T6VyTi76w8nZKT9x2O6T:En0rVTi77Hz2O6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0717cd25982f9bf847a6a6715dab5203_JaffaCakes118

Files

0717cd25982f9bf847a6a6715dab5203_JaffaCakes118
.dll windows:4 windows x86 arch:x86

988f21150e7a956cf6cb90e64604c5d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

_vsnprintf

gdi32

DeleteDC

user32

GetWindow

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE