3dd488b89cbc70e1cb4ade66c0bae594_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dd488b89cbc70e1cb4ade66c0bae594_JaffaCakes118
Size

57KB
MD5

3dd488b89cbc70e1cb4ade66c0bae594
SHA1

ece5ea61a92e85589f044337a1cf7781e2da1165
SHA256

433d75e40339d609e2567df54a2aed29b0f94b4a733875b5ccc90eff19b9d454
SHA512

bec17ad79eccec1004ebaad05ba103116703c2bd1cc685adb75d9d2ef56a6661760e508d7b7d210f2b08323030a9c4156c445ab83eba8f8ee9e33aa2348501fa
SSDEEP

1536:3Uzd8PSmApqj7IUiaF2Ef/zeXDhbAo1Ey:3LqVFS3/zsxjEy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dd488b89cbc70e1cb4ade66c0bae594_JaffaCakes118

Files

3dd488b89cbc70e1cb4ade66c0bae594_JaffaCakes118
.dll windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 51KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE