171b6fcf9003125261eefacd267e9754_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171b6fcf9003125261eefacd267e9754_JaffaCakes118
Size

27KB
MD5

171b6fcf9003125261eefacd267e9754
SHA1

c79363ba3ae7c9d661c3b35ae07d8ca9853db8e5
SHA256

4f464e9998d208384f48d2da31452c05a71660c0f377d6a6415233441fe03fcb
SHA512

343514ed5604ca978797c8b9ecaf73ecccb3955c84d5a0dc1fdfb4b2d7eb9edf617772df1069e975cfe3d494c42b023f9b1bbd699c423ac9c769c39f97c1ee8d
SSDEEP

384:/9myvbGcCLojkfpOlCQNh/edOTMQUbInFCUvkGg/eRJ4VeU46skU:VDK3LoofUXNhmKMQU8nFCmIqeeU30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171b6fcf9003125261eefacd267e9754_JaffaCakes118

Files

171b6fcf9003125261eefacd267e9754_JaffaCakes118
.dll windows:4 windows x86 arch:x86

90218010fbad8051919200339a757253

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndDialog
EndMenu
IsCharUpperA
LoadCursorA
LoadImageA
MessageBoxA
DrawMenuBar
OemToCharA
OemToCharBuffA
RegisterClassA
SetCursor
ShowCursor
DestroyCaret
CreateMDIWindowA
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamA
CreateDialogIndirectParamA
CloseWindow
CharUpperBuffA
ActivateKeyboardLayout
MessageBoxIndirectA
wsprintfA

kernel32

SleepEx
FreeResource
RtlUnwind
VirtualFree
CloseHandle
SetCurrentDirectoryA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ