f9b8af72f1cdfe22d0fc8fa03f372bad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9b8af72f1cdfe22d0fc8fa03f372bad_JaffaCakes118
Size

58KB
MD5

f9b8af72f1cdfe22d0fc8fa03f372bad
SHA1

61a4f45aed2d1e707f2ddf51358b3386b3e769a1
SHA256

17f40dc7d73ee456059e6f9e27528af85510511cf04a3db6eb6d6fba15b11212
SHA512

e4d6bfb6e6c1ebc5924bd7455aee5b621c20f3d74f631ddb7cc1a343e1849afdae0127b393b57c0b56a377177faaa305ff5d70244ef866db636ae312a91b3a3d
SSDEEP

1536:F7hligalhWrS5jyDoIWKfycLRccbWEt09Zfad8Xq:Fd/af7I5gK0nXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9b8af72f1cdfe22d0fc8fa03f372bad_JaffaCakes118

Files

f9b8af72f1cdfe22d0fc8fa03f372bad_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1e72807d43e6539f9e0cffb73db910d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawIcon
DispatchMessageA
DialogBoxParamA
DestroyCursor
CreateMenu
CreateMDIWindowA
CreateDesktopW
CharUpperA
CharToOemA
CharNextA
CharLowerA
EndDeferWindowPos
BeginPaint

kernel32

lstrcpyA
lstrcatA
TlsFree
GetVersion
GetTimeFormatA
GetSystemTimeAsFileTime
GetCommandLineA
FreeResource
ExitThread
EnumResourceTypesA
EnumResourceLanguagesW
EnumResourceLanguagesA
lstrlenA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE