3d5ded02c23d505ddeac7dda44ee9abd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d5ded02c23d505ddeac7dda44ee9abd_JaffaCakes118
Size

65KB
MD5

3d5ded02c23d505ddeac7dda44ee9abd
SHA1

8da17e22affde9822614ba71e60a657c0b037220
SHA256

a9875ed60fd31fd29430bcc958c1e322553a1fdec8cc0ca52db4f64d7c7e875c
SHA512

7f72e6b4eabc6878fdfdd0813ab3a79cc2a8776104a84e93be2453ef0818d98dd7d8327093436f6c26943f70e6d24c8a83385e361de81a9c64d4028d52cceb0a
SSDEEP

768:alUsarDCM+5ah5krRD9EbZrfdzw/fTY6bPuoHeVzQqwrFBIpjvmAXbI1uWEtVkRZ:sQG9YLJwHTY6b9bqIB7ytUeQx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d5ded02c23d505ddeac7dda44ee9abd_JaffaCakes118

Files

3d5ded02c23d505ddeac7dda44ee9abd_JaffaCakes118
.dll windows:5 windows x86 arch:x86

d6fc13d25531eac11287a1563683535b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualProtect
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

GetMessageA
SendMessageA

Exports

Exports

Wcoiadscvf
OpenFxcekgxfxqj

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 3KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ