2477ba6731e0f62ac9d9268827c38264_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2477ba6731e0f62ac9d9268827c38264_JaffaCakes118
Size

56KB
MD5

2477ba6731e0f62ac9d9268827c38264
SHA1

47bb4c744b75f16bab4323887506f833b4be0996
SHA256

4894841e9adb73c87f668e0f124999f3b16b94be1e00daba5edd837773f56818
SHA512

d52f10352bac893f52ab355256dda62157dbb8ad5e9e59e9304aa1d19f32b1d99b98c37c25d5b8cbd9fd0842d24b6b05518f6f239a693a92eeb40df56c1b7793
SSDEEP

1536:20z7h6EDeMllqBrm5ty83d6BXls4uzE+4O0kek:F70EDms5AiGlsTE+r0Nk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2477ba6731e0f62ac9d9268827c38264_JaffaCakes118

Files

2477ba6731e0f62ac9d9268827c38264_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7b76803d54039329eef7686cd31c7a3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawIcon
DrawCaption
DialogBoxParamA
DestroyIcon
DeleteMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamA
CreateDesktopA
CreateAcceleratorTableA
CharLowerA

kernel32

GetFileSize
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
VirtualAlloc
SetEndOfFile
ReadFile
RaiseException
OpenFileMappingA
LoadLibraryA
CompareStringA
EnumResourceLanguagesA
FlushFileBuffers
FreeResource
GetLocalTime
GetVersion
GetVersionExA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE