0e12ff11f543af47e9186925feb6fd7c_JaffaCakes118 | Triage

Sharing

General

Target

0e12ff11f543af47e9186925feb6fd7c_JaffaCakes118
Size

114KB
MD5

0e12ff11f543af47e9186925feb6fd7c
SHA1

8ce8ef5a14c15b1ca02c3ec42ada85defb1121c9
SHA256

e03867f2dfe5f5f02bb011fb5f9a8a93a65814eda281c32a2a397d6fbadf8287
SHA512

3f2143783c9330f74d73260c825fdaaa8889843badd8a8c9cec4f57699fdc5ca408d3a64254ca0fa42d903baac05b8d9a5711d569e9424d6cba3af105f2efc7b
SSDEEP

3072:HQfY3YnsloYPQCorcj+hEEZei3C7F2ODgUQ:HQfY3GsqYEw+hEEZeiypy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e12ff11f543af47e9186925feb6fd7c_JaffaCakes118

Files

0e12ff11f543af47e9186925feb6fd7c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

834c47dae4d4d44db39f569002282151

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoW
GetLastError
CreateFileW

comdlg32

ChooseColorA

shell32

SHGetDesktopFolder

oleaut32

SafeArrayPtrOfIndex
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
SysReAllocStringLen
VariantInit

comctl32

ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Draw
ImageList_SetIconSize
ImageList_Read
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_BeginDrag
ImageList_DrawEx
ImageList_Create

Exports

Exports

eiiariRyA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ