1c85f6ddd7c6ed717ff7f429d363e02b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c85f6ddd7c6ed717ff7f429d363e02b_JaffaCakes118
Size

100KB
MD5

1c85f6ddd7c6ed717ff7f429d363e02b
SHA1

da552e6209aa81df9f6b21ea51bfcc00f06a25a0
SHA256

fdcf8e0c285005a36fc2c2d0b88f93cc56272445552859ca8797a1e713c6d475
SHA512

e36f0c2206bca5f439dfce91af8fbe10e305efa090b1f6d720379111af107be0f2a877c8cef9e3d334ec862548f42031631246d4c54c5afd7c8fae091d71719a
SSDEEP

3072:i6cFK9Q31cK+NVKEwlPBcRerdkWGqzjTAv:bG1ZQeh1Gqzo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c85f6ddd7c6ed717ff7f429d363e02b_JaffaCakes118

Files

1c85f6ddd7c6ed717ff7f429d363e02b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a2f97b992b72b41ba1072319dc371e15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OpenSemaphoreA
HeapValidate
HeapCompact
CreateTapePartition
GetTimeZoneInformation
GetDevicePowerState
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess

gdi32

SetPixel
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
DeleteDC
MoveToEx
GetStockObject

Exports

Exports

cvhrd

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ