f476b7c2101a6f063ccb6c85b2c65e29_JaffaCakes118 | Triage

Sharing

General

Target

f476b7c2101a6f063ccb6c85b2c65e29_JaffaCakes118
Size

308KB
MD5

f476b7c2101a6f063ccb6c85b2c65e29
SHA1

ddeca0d366f7eac5d8100431e36b4bd27cfba438
SHA256

2e55d1fdeb564e956bd12901b636fd24f603507d402d3b9f76a92f570b639e1f
SHA512

7cb968e97db25c4618516115fc936b07ad92b1d9bef3ce4d98f778feb1af065405c7c7bfcbcfc251a5acb9ec4f720a9930e47f8d1627da6da4479f8a46ad842c
SSDEEP

6144:aJvdVUYvY2KLfn84k5xQpTaVAwYzzO9Lm0abfm1:aJvdDw2Wtk5xCTIYw0fm1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f476b7c2101a6f063ccb6c85b2c65e29_JaffaCakes118

Files

f476b7c2101a6f063ccb6c85b2c65e29_JaffaCakes118
.dll windows:4 windows x86 arch:x86

016bb43436f85f4c59aa55fd82417fe6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DeleteMenu
DestroyCursor
DestroyMenu
DispatchMessageA
DrawMenuBar
DrawStateA
CreatePopupMenu
EmptyClipboard
EnableScrollBar
EnableWindow
EndDialog
FillRect
GetDlgItem
CreateIconFromResource
CreateIcon
CreateAcceleratorTableA
CharNextA
DrawTextA
BeginPaint

kernel32

RtlUnwind
GetLocalTime
FindResourceA
EnterCriticalSection
TlsSetValue

Exports

Exports

DllCanUnloadNow
DllGetClassObject
InitSecurityInterfaceW
LsaApCallPackage
LsaApCallPackagePassthrough
LsaApCallPackageUntrusted
LsaApInitializePackage
LsaApLogonTerminated
LsaApLogonUser
LsaApLogonUserEx
SpInitialize
c
f
o
s

Sections

.text
Size: 66KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 238KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ