2d641caa86814613d9343f3dcdf1268e_JaffaCakes118 | Triage

Sharing

General

Target

2d641caa86814613d9343f3dcdf1268e_JaffaCakes118
Size

71KB
MD5

2d641caa86814613d9343f3dcdf1268e
SHA1

73c34242d403e9b9106c863ced75dd39c31f9083
SHA256

8142a12a6672c57d271fc9f01538526b9db88d4d808629fa37c43492ba65c870
SHA512

6fba1fbbb98dfc1359572fabcee309a69ac0c686589cf1356ca7a4293f59ada8120147296742711a4bc58fa13e50ea6222000a4bdf9ae3dea2b8e1dd6adb963f
SSDEEP

1536:jfCy+idGMaSCBKM6ReH9e6GXFVBHRGTrTDKXFykcLtB6v046veauRl//:jfCy/QMr7YeFBHQDGXFGLA0cX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d641caa86814613d9343f3dcdf1268e_JaffaCakes118

Files

2d641caa86814613d9343f3dcdf1268e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8eb28d2cdfafffd53ddc552118e4b75f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
GetCommandLineA
GetCurrentProcessId
GetDateFormatA
GetOEMCP
GetStringTypeW
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapDestroy
InterlockedExchange
LocalReAlloc
SetErrorMode
SetHandleCount
UnhandledExceptionFilter
UpdateResourceA
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenW

user32

EmptyClipboard
GetClassInfoA
GetLastActivePopup
GetSysColorBrush
GetSystemMetrics
IsWindowVisible
LoadCursorA
ModifyMenuA
PostQuitMessage
SetTimer
TabbedTextOutA
ValidateRect

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ