0b13126e4bc2056f8ace4cfdf92a4cb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b13126e4bc2056f8ace4cfdf92a4cb8_JaffaCakes118
Size

112KB
MD5

0b13126e4bc2056f8ace4cfdf92a4cb8
SHA1

eceb490d3c62ed884f48584772062949467a2467
SHA256

19fc418f2532b884a31d8584d896127d1a8dbf1785fc2479f13b75125ac3fd14
SHA512

5d1b5a13179d3a8ac1d85b9b227004359c6db4d56ce0bfbc19dcd39f513d244f36765ff2b47dc71b057986e07e0f0747395795ad1fabdce877c667bb17ec3200
SSDEEP

3072:2niREGlhMk3GoAsUwQ0skF0lretR3cJI28EvL:rEGlh12oonkF0ktZcJIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b13126e4bc2056f8ace4cfdf92a4cb8_JaffaCakes118

Files

0b13126e4bc2056f8ace4cfdf92a4cb8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7cc86607a8d972d4d7cdbc7fff80d2e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BuildCommDCBAndTimeoutsA
CloseHandle
CreateToolhelp32Snapshot
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetShortPathNameW
GetStartupInfoA
GetThreadLocale
GetThreadPriority
GetVersionExA
HeapAlloc
HeapCreate
OpenProcess
PurgeComm
Sleep
UnmapViewOfFile
WaitForMultipleObjects

user32

SetWindowLongA
GetDlgItem
IsWindowVisible

comctl32

DrawStatusTextA

msi

MsiCreateRecord
MsiCloseAllHandles
MsiGetProductCodeA
MsiSummaryInfoSetPropertyW

oleaut32

VarBstrCmp
SysReAllocString
SysFreeString
SafeArrayAllocDescriptor
SafeArrayAccessData
OleTranslateColor
OleLoadPicturePath
OleLoadPicture
OleIconToCursor
ClearCustData

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ