264cfc806148e2249a65a6611b6755ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264cfc806148e2249a65a6611b6755ff_JaffaCakes118
Size

66KB
MD5

264cfc806148e2249a65a6611b6755ff
SHA1

8d3615ae2ea02284f3479df9dd4f50a854dcd57d
SHA256

6ad37b6e4b88c21a82e1d6afa23b800d662c9f6314c2b6cb5e0b29e906f11c3f
SHA512

ac33894302ed1bc00ffbfe4193f48d10ce3410ad6d77028b394b8de3b934d6c2107340a05a079bb40b3008ce16648d0217c4612557c2971af2f28d8e2f3e69e8
SSDEEP

1536:bIXsX7ercbG+3bTl5/33KqbRHeGI5I9Ao6IyV+888:1JTltKq1LIi2osVLL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264cfc806148e2249a65a6611b6755ff_JaffaCakes118

Files

264cfc806148e2249a65a6611b6755ff_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7d3b4559d74c1f39097d33709601add8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
FreeLibrary
GetFileSize
GetThreadLocale
GlobalDeleteAtom
GlobalFree
GlobalGetAtomNameA
HeapAlloc
HeapCreate
HeapSize
MultiByteToWideChar
OpenEventA
SetStdHandle
VirtualProtect

user32

CopyRect
DispatchMessageA
EmptyClipboard
GetDesktopWindow
GetScrollPos
GrayStringA
LoadCursorA
MapDialogRect
ModifyMenuA
PostQuitMessage
RegisterClipboardFormatA
SetWindowTextA
TabbedTextOutA

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ