1501bf476882065e036cd4dfe30402d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1501bf476882065e036cd4dfe30402d2_JaffaCakes118
Size

241KB
MD5

1501bf476882065e036cd4dfe30402d2
SHA1

f578133499d8a07f592450098c189cbe0b061556
SHA256

67df5bff1513534ea42a7778a491657fc5db48a37c7929832ae01bcebf540b2f
SHA512

a5bad9bd415ecd7cfc7f90bca407c0111946e53a8c2b4d59f96ac3b97ec246dfb95ec69cd1182b12f06cc428c3299d65360e4b3dd3d4b7bb0614140d2e311701
SSDEEP

6144:0EVfMWxFRrtUc45qouPFptFvXVD/wBUQ779S:ZbxFtDntMBUES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1501bf476882065e036cd4dfe30402d2_JaffaCakes118

Files

1501bf476882065e036cd4dfe30402d2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a342e0986fdb5733d4da5345bdafe5d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CreatePopupMenu
DeleteMenu
EnableScrollBar
EndPaint
EqualRect
FillRect
GetCursor
GetDC
GetDlgItem
CreateIconFromResource
IsCharLowerA
LoadBitmapA
OemToCharBuffA
RegisterClassA
SetCursor
ShowCursor
ShowOwnedPopups
ShowScrollBar
CreateDesktopW
CopyRect
CharUpperA
CharToOemA
CharPrevA
CharNextA
GetFocus
ChangeMenuA

kernel32

lstrcpynA
lstrcmpA
SetEndOfFile
SetCurrentDirectoryA
GetDateFormatA
ExitProcess
lstrlenA

Sections

.text
Size: 110KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE