3bc5237f9a53b483fff914677b07a247_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bc5237f9a53b483fff914677b07a247_JaffaCakes118
Size

22KB
MD5

3bc5237f9a53b483fff914677b07a247
SHA1

6f657d8d305d30598c68d0114c728bc8348eb66a
SHA256

e2d386ca2f45a62b7374c1ddb5f8384ce7d4173415eca16e319daaec115081c2
SHA512

52f5d81a7419803b9e1008b5685bc2c2f7abaa38beb028f9c6670c58578fc88acfbec2b7967586e00c37fedb82857707416aec703ff6cb510b500529c66b5b17
SSDEEP

384:gGEZEIwqcbm1hjcVGcRCNEb/2mLkNtk2HvtqhAI:rUlciTsGqEmLks2HY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bc5237f9a53b483fff914677b07a247_JaffaCakes118

Files

3bc5237f9a53b483fff914677b07a247_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dfd13ac932bf925f13f4fa59d7cdc929

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrlenA
GetLastError
CloseHandle
Sleep
lstrcmpiA
lstrcpyA
GlobalAlloc
GlobalFree
DeleteFileA
FreeLibrary
LoadLibraryExA
SetFilePointer
GetModuleFileNameA
lstrcatA
CreateThread

Exports

Exports

Load2Graphic
StartVideo

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ