23ac57f8dcff6a8be7a325d2ff2a5c16_JaffaCakes118 | Triage

Sharing

General

Target

23ac57f8dcff6a8be7a325d2ff2a5c16_JaffaCakes118
Size

167KB
MD5

23ac57f8dcff6a8be7a325d2ff2a5c16
SHA1

d24031ac22171b0a2cc567944dbd20fe3c0c2155
SHA256

3c77d5969ef382e59ca4dd85d5b7b04afc32fa76f437f88b2c51a4b92c3f7ba2
SHA512

9418f5e10d5ff816384009a77da8225ae0bb9fc56eb6630ce1ecbca92b4c7f8fbcea4c6c554ed3ee100b8ef3271d94710021506e69d5ceb487e712904b4d8780
SSDEEP

3072:cuzKPUNhkuM7LNpU+5hdLk7ydfdlxTxgr+rKqld3TyBTsaCIsB9VI7dOeDWu0:cuzFhkuQ3UmhdLou19g0KqfyTsaCo7Az

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23ac57f8dcff6a8be7a325d2ff2a5c16_JaffaCakes118

Files

23ac57f8dcff6a8be7a325d2ff2a5c16_JaffaCakes118
.dll windows:4 windows x86 arch:x86

de0b31786d31e35c2e1ff38ddb119883

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

SHGetFileInfoA
SHGetFolderPathA
SHGetSpecialFolderLocation
SHGetDesktopFolder
Shell_NotifyIconW

user32

GetSysColorBrush
IsZoomed
IsCharLowerA
LoadBitmapA
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
CharNextA
GetActiveWindow
IsRectEmpty
IsWindow
GetWindowTextLengthA

kernel32

LoadLibraryA
GetModuleFileNameA
lstrlenA
GetModuleHandleA
GetOEMCP
ExitProcess
VirtualAllocEx

Exports

Exports

_8E9kVq@16

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ