0265a122bc60a3531e39dc7e68ffbb7a_JaffaCakes118 | Triage

Sharing

General

Target

0265a122bc60a3531e39dc7e68ffbb7a_JaffaCakes118
Size

101KB
MD5

0265a122bc60a3531e39dc7e68ffbb7a
SHA1

297118b9c20071e906df465455d1b039ce31be64
SHA256

b773a012b92c2b0d0b5546de693fa660098979c500f11cb2862dd846c3847877
SHA512

c72b8e804402a1d54f758ba1a2797ca5b4b1074fbc72b619eae3836268e18dc555e4d67285e9f6dbba463025ebf3cd02435f3132e3fdbebf2382ef4be9d5f803
SSDEEP

1536:lkUU3CcEAGZtmx5OHhysevBk/FiAtDSU61o55n+0247qDwVPOwNsRfS64kx/w86:/UEBAKH9eQiAtuiG0J7q+vs5Z4kW3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0265a122bc60a3531e39dc7e68ffbb7a_JaffaCakes118

Files

0265a122bc60a3531e39dc7e68ffbb7a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ce6e1b8e0d457a583cc2c169d9781d7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

FillRect
EnableWindow
EmptyClipboard
DestroyIcon
DeleteMenu
CreateAcceleratorTableA
CharUpperBuffA
CharLowerA
wsprintfA

kernel32

SetCurrentDirectoryA
lstrcmpA
lstrcatA
WriteFile
TlsGetValue
SleepEx
OpenFileMappingA
LeaveCriticalSection
GetVersion
GetModuleHandleA
CloseHandle
EnterCriticalSection
FlushFileBuffers
FreeResource
GetLastError

oleaut32

RegisterTypeLib
RevokeActiveObject
SafeArrayAccessData
SafeArrayCreate
SetErrorInfo
SysFreeString
SysStringLen
VarBstrCat
OleTranslateColor
OleIconToCursor
OleLoadPicture

Sections

.text
Size: 25KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ