ff6259924faaff3de2147ed262849e38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff6259924faaff3de2147ed262849e38_JaffaCakes118
Size

208KB
MD5

ff6259924faaff3de2147ed262849e38
SHA1

414fa68043628181fbb7e786f207c3be949975a1
SHA256

179afe0406d549650c1c2ebadc826432d37916ce387190daea0590e2bb4facdb
SHA512

31daf85512c23568234630238aaac171f2486aa2226e4c555bc6634fb8e9e36910221a30589fc627251d3d58e96ee97e3ab14d7c55699b62f9f2757368ede82a
SSDEEP

6144:AvCLmqfTEEqej2r5Ux8LorfGcDrCrfOy+PoDC1zC/0G9IgN3MUvZXpCPtDk1jUT1:fLmqfTEEqtr5Ux8LorfGcOOy+PoDC1z5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff6259924faaff3de2147ed262849e38_JaffaCakes118

Files

ff6259924faaff3de2147ed262849e38_JaffaCakes118
.dll windows:1 windows x86 arch:x86

e54fde7d1bcc8060e8441555f52b4862

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

ntdll

memcpy
memset

Sections

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ