25404a7f2fa62b06b2a2ae791177cece_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25404a7f2fa62b06b2a2ae791177cece_JaffaCakes118
Size

69KB
MD5

25404a7f2fa62b06b2a2ae791177cece
SHA1

9c92b2c1b4e0a3c0af43dbafaab1f41825dfec49
SHA256

5a1b1afc891bc8319b2214423bc36aa661a3dca474e0e456d4339932e983daa9
SHA512

3b92ef935428e06a0c93bf299205bf80fb836bfed7210c649ddcdc185d592a9752d6cbf91783ea3cae12ea1368688a1d6b7df9fb0014910fb91a55fd9b60b303
SSDEEP

1536:Gx8M30KBuHe3fuo0+jvZR/1zAyZ8ctyidsLgDrkpmM7EOc:k8MEKduozjvHOQupmM47

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25404a7f2fa62b06b2a2ae791177cece_JaffaCakes118

Files

25404a7f2fa62b06b2a2ae791177cece_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a976dedfbf38cc3665fe0bca635cd64a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetModuleHandleA
GetStdHandle
GlobalHandle
GlobalUnlock
HeapAlloc
HeapCreate
HeapSize
LCMapStringA
MulDiv
SetFilePointer
UnhandledExceptionFilter
VirtualFree
lstrcpyA
lstrlenW

user32

CallNextHookEx
CharUpperA
ClientToScreen
EqualRect
GetKeyState
GetMenuCheckMarkDimensions
GetParent
GetPropA
GetWindowDC
IsDialogMessageA
IsRectEmpty
IsWindow
KillTimer
LoadBitmapA
PeekMessageA
ReleaseCapture
SendDlgItemMessageA

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ