c07702945cb4e2d5a9487426a8445465_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c07702945cb4e2d5a9487426a8445465_JaffaCakes118
Size

23KB
MD5

c07702945cb4e2d5a9487426a8445465
SHA1

b2e8aec8805b242a9bf1ba4233bc8c8d9f475f9f
SHA256

26a9518eb3dca1b011db9113db8be028a1675b4af308fe92e9c0e4d6b1b80fef
SHA512

b4fe332d5710be2728197648c355d8b3bbb1f01d5bface9dedeb7464e34872f0ceb8a12b2e07d6b51a853688bf0ed847ec8757299f46a78d9c2b052ab3012b3b
SSDEEP

384:anU7YaBZlPZIhzvE7orHLAgyDb2zo7ZfXAdU3k+FMyBMsCZuDdA:anKHZlRIh9Lwb3y2KMuuhA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c07702945cb4e2d5a9487426a8445465_JaffaCakes118

Files

c07702945cb4e2d5a9487426a8445465_JaffaCakes118
.dll windows:6 windows x86 arch:x86

596577c5f32d686215faff7277fcfbb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiBuildClassInfoList
SetupQueryFileLogA
SetupQuerySourceListA

user32

AnyPopup
CharLowerBuffW
IsDialogMessageA
NotifyWinEvent

mapi32

ord53
ord177
ord52
ord13
ord174

msacm32

acmDriverID
acmFilterChooseA
acmFilterTagDetailsA
acmFilterTagDetailsW
acmFormatTagDetailsA
acmStreamClose
acmStreamConvert
acmStreamMessage

odbc32

ord27
ord43
ord138
ord239

winspool.drv

AddPrintProvidorW
AddPrinterDriverExW
EnumMonitorsW
GetPrinterDataExA
GetPrinterDriverA
ResetPrinterA

kernel32

EnumSystemCodePagesW
GetProcessHeap
HeapAlloc

msvcrt

_adjust_fdiv
_initterm
free
malloc
memcpy
memset

Exports

Exports

pntdyfpwdm

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ