f8edac39655360abf71015d2e7eb3145_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8edac39655360abf71015d2e7eb3145_JaffaCakes118
Size

67KB
MD5

f8edac39655360abf71015d2e7eb3145
SHA1

c6541cd43e5128b74b3c7581b7fc90f4d60b9db4
SHA256

8ed70b76d79ffa96f9c80b94cd9e4f24020e33d694224c0bf610d358913c79a1
SHA512

a9b3e0590a8c8bd2c847bfadbdf01fc98fff0c346cfe1b4204c584a599c2619ca53cb70866be61c15a554bc4cd0597a266481bec36f11f5441130b3ba78dadd5
SSDEEP

1536:1GClCUFPnh/UikAQapcA05UraScARzZokNvkibaLKHOt0:1GC0Yh/UiKIuC9TwLKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8edac39655360abf71015d2e7eb3145_JaffaCakes118

Files

f8edac39655360abf71015d2e7eb3145_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8eb28d2cdfafffd53ddc552118e4b75f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
GetCommandLineA
GetCurrentProcessId
GetDateFormatA
GetOEMCP
GetStringTypeW
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapDestroy
InterlockedExchange
LocalReAlloc
SetErrorMode
SetHandleCount
UnhandledExceptionFilter
UpdateResourceA
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenW

user32

EmptyClipboard
GetClassInfoA
GetLastActivePopup
GetSysColorBrush
GetSystemMetrics
IsWindowVisible
LoadCursorA
ModifyMenuA
PostQuitMessage
SetTimer
TabbedTextOutA
ValidateRect

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ