f6b5551a80aa6599e316bda898cbf663_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6b5551a80aa6599e316bda898cbf663_JaffaCakes118
Size

43KB
MD5

f6b5551a80aa6599e316bda898cbf663
SHA1

0659b6a21cc7d2dc38cda4744fa15980275a95a2
SHA256

c86d3ea0221d35aa9ed8155b5e7c8cc614309613989ed954033c4072b878f614
SHA512

b25b5db97e8b938cf9b1be9c4f7b12601e85e7e48ccb94a0b508743b0a0b8d42e257df40047d49cbed9c710b05b38985e17843d49a81ff046d84f768525b1d60
SSDEEP

768:m9ONH0qeuDCcVEn3adZ/HXY5ryaHQBstQflXQvYRM9AG70c7l:eqje2En3ad5KrlQstoOvkM9AW08l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6b5551a80aa6599e316bda898cbf663_JaffaCakes118

Files

f6b5551a80aa6599e316bda898cbf663_JaffaCakes118
.dll windows:4 windows x86 arch:x86

786c270f9bf875c3346c75a1ea619a6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

_copysign
__p__tzname
__p__wpgmptr
_mbsnicmp
_dup
_getws
_inp

kernel32

CreateEventW
GetCommConfig
GetCurrentProcessId
GetThreadLocale
LocalAlloc
LocalHandle

Sections

.text
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE