03536c9b23680db04e3a2dff081069fe_JaffaCakes118 | Triage

Sharing

General

Target

03536c9b23680db04e3a2dff081069fe_JaffaCakes118
Size

14KB
MD5

03536c9b23680db04e3a2dff081069fe
SHA1

26ed061273716a0937c94e7df40a64cad2942ce6
SHA256

87ca8e82f9fd7355b2a261fa694191dc23d06c6d7ae955b94f4053549ca533fe
SHA512

b4599a5923034858d4dfc544fc876a09807fcde0dd0f16f9a943f3c4db69651dd66308989d59eb7bf7152e20f774e5a106720fe8f4c1098df7d772075dd8c2ad
SSDEEP

192:NNsXb6FoJvCIpk+GtvjANHK1TYpNDiHB4pPKvtPUbXHtE6nYj1/HYPNtQ:sb6FACtLtvK7iHBFcbXHtE6OYP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03536c9b23680db04e3a2dff081069fe_JaffaCakes118

Files

03536c9b23680db04e3a2dff081069fe_JaffaCakes118
.dll windows:4 windows x86 arch:x86

920d7643db925782c8dfb33fe1e0623a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CreateWindowExW
RegisterClassA
OpenIcon
ExcludeUpdateRgn
EndPaint
CreateIcon
ArrangeIconicWindows
AnyPopup
AdjustWindowRectEx

kernel32

GetModuleHandleW
lstrcpyA
Sleep
CloseHandle
CreateFileA
DeleteFileA
DeviceIoControl
ExitProcess
ExitThread
GetModuleHandleA
GetProcessHeaps
HeapAlloc
PurgeComm
QueryPerformanceFrequency
ReadConsoleOutputCharacterA

comctl32

ord5

gdi32

GetBoundsRect
GdiFlush
BitBlt

ws2_32

WSASocketA
socket
setsockopt
recv
gethostbyname

Exports

Exports

fyrshet

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 946B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ