242a7f264a08ed5f831d6b8ed118214d_JaffaCakes118 | Triage

Sharing

General

Target

242a7f264a08ed5f831d6b8ed118214d_JaffaCakes118
Size

140KB
MD5

242a7f264a08ed5f831d6b8ed118214d
SHA1

1ceb2bfee804b4421f43b28613ac519cd104316e
SHA256

698454183d4fc3fd29a6aaca24779c63a5f2b2d2e4909e3b40d032b73ad52a98
SHA512

413ddc06cb97b00a90bb3ecc5b437508bdd9a1310ce0cc273969bbda146115186ae7df0ce673db5010ccc1eff84cf5a5beb1de4061fac1f0eb2b430353c3ed83
SSDEEP

3072:P1XdZPmg3gTeHmiZlSjPIKcREngY4AHEuTGgXJis2DF0qWeNTI0m:P1NhaeHxZlSjPIKcGgYZkuFZC0wEV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
242a7f264a08ed5f831d6b8ed118214d_JaffaCakes118

Files

242a7f264a08ed5f831d6b8ed118214d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a976dedfbf38cc3665fe0bca635cd64a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetModuleHandleA
GetStdHandle
GlobalHandle
GlobalUnlock
HeapAlloc
HeapCreate
HeapSize
LCMapStringA
MulDiv
SetFilePointer
UnhandledExceptionFilter
VirtualFree
lstrcpyA
lstrlenW

user32

CallNextHookEx
CharUpperA
ClientToScreen
EqualRect
GetKeyState
GetMenuCheckMarkDimensions
GetParent
GetPropA
GetWindowDC
IsDialogMessageA
IsRectEmpty
IsWindow
KillTimer
LoadBitmapA
PeekMessageA
ReleaseCapture
SendDlgItemMessageA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ