29771bab7796955e58dac008fbdf4c3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29771bab7796955e58dac008fbdf4c3a_JaffaCakes118
Size

34KB
MD5

29771bab7796955e58dac008fbdf4c3a
SHA1

013d00d733f4c0324ac62a4d15fba0e869040a0d
SHA256

f566ac74125add6f78d8655ce576454e12b7a6d049c3cd102eabf77895550c73
SHA512

5131375444ea05c845aacdbaba583a38f1a263114ebe884c94104b909cebb6f0b3ec31c2cef2d68d08dc2d5ac486cd14e2a7bb7eb145f5f558df774c222086fa
SSDEEP

768:efeyugQAutcRbYTPKYdYYYYYYYYoYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYq:e2y5Y68kyKQwFqGPEk5ky

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29771bab7796955e58dac008fbdf4c3a_JaffaCakes118

Files

29771bab7796955e58dac008fbdf4c3a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

48f16a5932b5ef693e9b1dd849029fd7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetCursor
OffsetRect
DialogBoxParamA
CreatePopupMenu
CreateMDIWindowA
CreateDialogParamA

kernel32

ExitProcess
lstrcatA
SetCurrentDirectoryA
MapViewOfFile
GetVersion
GetSystemTimeAsFileTime
GetStartupInfoA
EnumResourceTypesA
GetDateFormatA

Sections

.text
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE