2432c8f764e6ea38c646601b471be075_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2432c8f764e6ea38c646601b471be075_JaffaCakes118
Size

70KB
MD5

2432c8f764e6ea38c646601b471be075
SHA1

8bdb68955e3a67eb4956bcc734016b10673fcc9a
SHA256

ed68ddc79f81f133c639cd0473bdc7477e51715a2a7d5afbb61c3eb68bf32cdf
SHA512

5d91643b68949528b2fe7d4682ab1778051e2586fc71fec79dad2e18161a24c65c83ff35eff15d925248610cc6fe77ba6a37880a980f76687c4eed10820324ad
SSDEEP

1536:PeCglJ6G/JOhkBDsGMV24fgk+GFGg4BsGMfBFM4NwbrpZiXzP7T:PEChSVQqGFJrNwbrUrf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2432c8f764e6ea38c646601b471be075_JaffaCakes118

Files

2432c8f764e6ea38c646601b471be075_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a976dedfbf38cc3665fe0bca635cd64a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetModuleHandleA
GetStdHandle
GlobalHandle
GlobalUnlock
HeapAlloc
HeapCreate
HeapSize
LCMapStringA
MulDiv
SetFilePointer
UnhandledExceptionFilter
VirtualFree
lstrcpyA
lstrlenW

user32

CallNextHookEx
CharUpperA
ClientToScreen
EqualRect
GetKeyState
GetMenuCheckMarkDimensions
GetParent
GetPropA
GetWindowDC
IsDialogMessageA
IsRectEmpty
IsWindow
KillTimer
LoadBitmapA
PeekMessageA
ReleaseCapture
SendDlgItemMessageA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ