2998dc597eebd85bff0b8abb5545f3c0_JaffaCakes118 | Triage

Sharing

General

Target

2998dc597eebd85bff0b8abb5545f3c0_JaffaCakes118
Size

4KB
MD5

2998dc597eebd85bff0b8abb5545f3c0
SHA1

503a2264cb09c449101217efa6048bf2f34e3e33
SHA256

2d474f9aab9d88f63ae48e14fb477a34ff11e7833190d5f13f1eed8aa7b6217b
SHA512

3bd2efad37cf49bd7bccdca1e996713d46b75c3dd3fd266862d8427a89ad4a710657daf174778dce6dfdf926c31e52bd855110e9d98a6bbebcf99c4013eb23ad

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2998dc597eebd85bff0b8abb5545f3c0_JaffaCakes118

Files

2998dc597eebd85bff0b8abb5545f3c0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

8e774e903ff75d3d78866ccd64b23f30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryW

user32

DialogBoxParamA
DlgDirListA
DestroyCursor
DestroyIcon
DestroyMenu

Exports

Exports

?adddda@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?daaaaaaaaaaaaaaaaf@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?ddddddddaaaaaaaaaaaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?saaaaaaaaaaaaaa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?sadsssssssssssssa@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
?ssssssssssssssssssssssssss@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 877B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ