fb37d4fa197198f8bbb62f76dab9dc60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb37d4fa197198f8bbb62f76dab9dc60_JaffaCakes118
Size

57KB
MD5

fb37d4fa197198f8bbb62f76dab9dc60
SHA1

8e653e8b5bdd7bf34730534d25ba78d189d3c5d3
SHA256

e721bcd436d1a09e463350df9f5cf571156eb5bd93c871df45c41489078c3b43
SHA512

f5944d2de290cee141fbc4d031a4fc49cfc10062855fa0d5a3141a9d4ac1c3eff90cff62da55b899c86aea35a69b16e6a76654ef8bde7b861c90b9099d32fc5a
SSDEEP

1536:vqmVQibmtuajmiVaQcJCWzgymYN6BAZvUXH1Z:vRbSAajmisBrC2ZvUX1Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb37d4fa197198f8bbb62f76dab9dc60_JaffaCakes118

Files

fb37d4fa197198f8bbb62f76dab9dc60_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d99ee2a315abf07df08f7300222add91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DestroyWindow
DestroyCaret
CreateMDIWindowA
CreateDesktopW
CopyRect
CloseWindow
CharUpperBuffA
ChangeMenuA
ActivateKeyboardLayout

kernel32

GetSystemTimeAsFileTime
lstrcpynA
lstrcmpiA
lstrcmpA
VirtualFree
VirtualAlloc
TlsSetValue
TlsAlloc
Sleep
SetLastError
CompareStringA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
GetLastError
GetPrivateProfileStringA
GetSystemTime
InitializeCriticalSection
LeaveCriticalSection
LocalAlloc
MapViewOfFile
OpenFile
OpenFileMappingA
RtlUnwind
SetCurrentDirectoryA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE