3eab84b3851c6ba29cd4dd48f0523581_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eab84b3851c6ba29cd4dd48f0523581_JaffaCakes118
Size

25KB
MD5

3eab84b3851c6ba29cd4dd48f0523581
SHA1

7f9b29f111fc3e923b5134508edde4ab6350d389
SHA256

5e7d6fa5a6dfde8699ca14a570b0115ab14d35651ddc9e830b7fcc19ac0ac696
SHA512

cba4140274b92e83ea9051532978e7d0d90fdfac92cdd02b90f7a16d003a0d4e43c2b54f2f745ee2f1aec6d70a8ace148b7cda318b3f0937f0eaf2d3e5ab0a5c
SSDEEP

768:XcalArVZncOJ9ZdVccLvXLZiJxrCjPOQP:xMrJ9ZXLLPLZCr0POQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eab84b3851c6ba29cd4dd48f0523581_JaffaCakes118

Files

3eab84b3851c6ba29cd4dd48f0523581_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3dc3520a3080b371254d934a9d0901cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect

user32

GetCursorPos
GetWindowDC
BeginDeferWindowPos
CheckMenuItem

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pcle
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ