16170af219ff1614d5ad70a3b39d8624_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16170af219ff1614d5ad70a3b39d8624_JaffaCakes118
Size

61KB
MD5

16170af219ff1614d5ad70a3b39d8624
SHA1

71afa6933c823f6410659218da0a410421e55544
SHA256

bb43f9025d09c71ad809453ffafa2d8b449a1f0f1a614209dc7884f16b4cdbcf
SHA512

aab081be0f466d7d0e4c7c3db47632ccb4f92e1ca7b81bffe72dbeae79eef2af13c43d16f8f8ddaccc2313591090c941a21d44107ce84e5727b7b2c89867f9d0
SSDEEP

1536:rWSnlCChOLbZ386Xi9/TnukiDrtG4ZcG7f9jZ:rWSlCzRc/TnziD46ci9jZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16170af219ff1614d5ad70a3b39d8624_JaffaCakes118

Files

16170af219ff1614d5ad70a3b39d8624_JaffaCakes118
.dll windows:4 windows x86 arch:x86

29f8bd90ef2fefe0b4054ad15fd875f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareFileTime
CompareStringA
CreateMutexA
EnumResourceLanguagesA
FindResourceA
GetCPInfo
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapCreate
RaiseException
TlsAlloc
UpdateResourceA
VirtualProtect

user32

CallNextHookEx
DestroyWindow
DrawTextA
GetClassInfoA
GetFocus
GetMessageA
GrayStringA
IsWindowVisible
OpenClipboard
SendMessageA
SetActiveWindow
UpdateWindow

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ