2863fe3c2a8e2ce7b73e56259be26000_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2863fe3c2a8e2ce7b73e56259be26000_JaffaCakes118
Size

39KB
MD5

2863fe3c2a8e2ce7b73e56259be26000
SHA1

9d040eb59610bfe46583a42c62c92f76d0595fe2
SHA256

db5d4265b1ebf8c51926e873bdb4ac0e0d159af6e167260137a3d660fcdf1bf0
SHA512

e0f524ff875fc955451c0cc65ff50c72ee7215b86cd1e16a3a8fefc65e64551085bbcf29ff5387a9dc7de0f62d6e13e5fb930743a970a999c12d0b60fbcef2b4
SSDEEP

768:HFDHs27WP+FIwH7CgqLnfJoGyinXLe/kXDzToZZKkxXnkDfHMzmi:lbQP4TgeUDvoa2nuEh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2863fe3c2a8e2ce7b73e56259be26000_JaffaCakes118

Files

2863fe3c2a8e2ce7b73e56259be26000_JaffaCakes118
.dll windows:4 windows x86 arch:x86

84aee533e9285d5ba72b36752198b5d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
PulseEvent
RtlUnwind
SetLastError
SetPriorityClass
SetThreadAffinityMask
SetUnhandledExceptionFilter
lstrcmpA
lstrlenA

msvcrt

__getmainargs
__p__commode
__set_app_type
_except_handler3
exit
free
realloc

user32

AppendMenuA
DestroyWindow
EndDeferWindowPos
GetDC
ScreenToClient
SetMenuItemInfoA
SetWindowPlacement
SetWindowPos

winmm

mmioAdvance
mmioClose
mmioDescend
mmioStringToFOURCCA
timeBeginPeriod
mixerGetLineControlsA

Exports

Exports

GetEncryptionForAdapter

Sections

.text
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ