29a922408a9b4296b942236163813633_JaffaCakes118 | Triage

Sharing

General

Target

29a922408a9b4296b942236163813633_JaffaCakes118
Size

65KB
MD5

29a922408a9b4296b942236163813633
SHA1

6e889e1286d852637539cd61f07862e8279fb7b0
SHA256

14cce9a0ddb1a72ce2b15abd89382d3e3b5fbe213392706b3a22f37f446b1ebe
SHA512

c26b6a9b45d189653713c9e54d841a43bbade81992a3080f796e23d1110c512b9e4c773f60d015da110facb8a0fb466678dfed0c420dceb0a83b2635e5479ea4
SSDEEP

1536:YSls8NaW57/9mzY4WC1c+NrD84rmE4CjbpEBbEH:FRIw/ZC1c+NrV94sb2BbEH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29a922408a9b4296b942236163813633_JaffaCakes118

Files

29a922408a9b4296b942236163813633_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bac2a227bc3530d1ff569b5b34c8c645

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetTempPathA
GetThreadLocale
GetTimeZoneInformation
GetVersion
GlobalReAlloc
HeapAlloc
HeapCreate
InterlockedDecrement
LocalFree
LockResource
WaitForSingleObject
lstrcatA

user32

CallNextHookEx
CharUpperA
CopyRect
EmptyClipboard
GetActiveWindow
GetClassNameA
GetDC
GetFocus
GetMenuCheckMarkDimensions
GetScrollPos
GetSysColor
GetWindow
GrayStringA
IntersectRect
OpenClipboard
SetWindowTextA
UnregisterClassA
WinHelpA

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ