d263d24ca8ee7a03c3b9b86a9664f6cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d263d24ca8ee7a03c3b9b86a9664f6cb_JaffaCakes118
Size

347KB
MD5

d263d24ca8ee7a03c3b9b86a9664f6cb
SHA1

384e99b34bd0560fe1aed912668761d13392071a
SHA256

a87811c2ffb4cf23d7f1b274627df9fa4037e3c7c7cc492c41dd8216cfa4972e
SHA512

ac048c425bdaaaf388848dc7e8b9868e9edb4080ee79b487520552983a4fa911919dfcc6b548e82fede3ba569735bf0116c76fca8b19a3d17c9bf0e958f4f370
SSDEEP

6144:muLayxI7hCoFPAiNMdixNQ8CLwBN9/46oSnmlBNicMpIFVa:VaQuhTFPfbzFCMBr/4bSnm3oIFI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d263d24ca8ee7a03c3b9b86a9664f6cb_JaffaCakes118

Files

d263d24ca8ee7a03c3b9b86a9664f6cb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

eb8ce8d6456329b7038389384482d394

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

mfc42

ord825

msvcrt

tolower

kernel32

FindNextFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetDesktopWindow

advapi32

RegEnumValueA

ws2_32

bind

shlwapi

PathIsDirectoryA

ole32

CoCreateInstance

oleaut32

SysAllocString

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

netapi32

Netbios

Exports

Exports

Dispatch
InputFile
PrintFile

Sections

.text
Size: 322KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE