e91a896e4e1dbefcdf895e4453aca564_JaffaCakes118 | Triage

Sharing

General

Target

e91a896e4e1dbefcdf895e4453aca564_JaffaCakes118
Size

26KB
MD5

e91a896e4e1dbefcdf895e4453aca564
SHA1

e4f34fdb1221b142d1577bccd53fe95e813550ae
SHA256

570925b7b92958146f5a14e4001e0a42d916a80b6749eb99b2c23d2ba782014c
SHA512

fc0e0862978f6469c92986937166c375b9d74affc5c295e3b949ea6407cbfb1be35386e564fa2cc4d7d899195cebf0807fb40e84ba441c423fa01d495205196d
SSDEEP

768:oqL9DLMKXHOZwrFBw1eOZIPOoeecde0ejC:oqSK3prFB2LZIPGdMC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e91a896e4e1dbefcdf895e4453aca564_JaffaCakes118

Files

e91a896e4e1dbefcdf895e4453aca564_JaffaCakes118
.dll windows:4 windows x86 arch:x86

90218010fbad8051919200339a757253

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndDialog
EndMenu
IsCharUpperA
LoadCursorA
LoadImageA
MessageBoxA
DrawMenuBar
OemToCharA
OemToCharBuffA
RegisterClassA
SetCursor
ShowCursor
DestroyCaret
CreateMDIWindowA
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamA
CreateDialogIndirectParamA
CloseWindow
CharUpperBuffA
ActivateKeyboardLayout
MessageBoxIndirectA
wsprintfA

kernel32

SleepEx
FreeResource
RtlUnwind
VirtualFree
CloseHandle
SetCurrentDirectoryA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ