24d2194d9762f2331982ecc56ffbe4d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d2194d9762f2331982ecc56ffbe4d6_JaffaCakes118
Size

69KB
MD5

24d2194d9762f2331982ecc56ffbe4d6
SHA1

8b4f744b546f97a27df79d035597b0b0b77b05b3
SHA256

a59f6d5626c2671f8cdb44ce928f9d2ed34e3aab0c5a4f301061f7d8aa762d39
SHA512

727c79a8bc80fa7eb827de2191627a58bf59d3e47f2f70841f5a759dbb3418be42415fc430934a0be6701dd001e70b4fd21fc4c47a1a1639426524a38f4697d1
SSDEEP

1536:ukmXe1PNFR9m28QYCXPLfi3p6g+qdS1NtofsM6MxiMd:ZaeNt9mBCXDfiNwt6sQiG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d2194d9762f2331982ecc56ffbe4d6_JaffaCakes118

Files

24d2194d9762f2331982ecc56ffbe4d6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7d3b4559d74c1f39097d33709601add8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
FreeLibrary
GetFileSize
GetThreadLocale
GlobalDeleteAtom
GlobalFree
GlobalGetAtomNameA
HeapAlloc
HeapCreate
HeapSize
MultiByteToWideChar
OpenEventA
SetStdHandle
VirtualProtect

user32

CopyRect
DispatchMessageA
EmptyClipboard
GetDesktopWindow
GetScrollPos
GrayStringA
LoadCursorA
MapDialogRect
ModifyMenuA
PostQuitMessage
RegisterClipboardFormatA
SetWindowTextA
TabbedTextOutA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ