33616d4ab0e61cbe004c633be05336e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33616d4ab0e61cbe004c633be05336e9_JaffaCakes118
Size

241KB
MD5

33616d4ab0e61cbe004c633be05336e9
SHA1

5500edb2e231dfa72b3254b88fb6975e713219c9
SHA256

b5e37308178d117fd05066d3891cac3ef4ff75d786dad8a3f5cf66a06a824aa7
SHA512

61bc62288085a105883ca5f0be33ed462d78f8741f8a3bbedebd4ea290f939dd1512a1cf7d676992bfa9c8783cd690848fbba5d17de1d1e53d467fc5b6327a62
SSDEEP

6144:Ecai53XORQAPLwsYm1pCKkVbKes7qa/pAWJnBR:wvXxYm1pCnVbKeItpAWJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33616d4ab0e61cbe004c633be05336e9_JaffaCakes118

Files

33616d4ab0e61cbe004c633be05336e9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

535ff14c1e7f92c5aa458644ee921a94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawIcon
EnableScrollBar
EnableWindow
EndDeferWindowPos
DestroyWindow
LoadCursorFromFileA
OffsetRect
ShowCursor
DestroyCaret
CreateCursor
CloseWindow
IsCharUpperA
CharUpperA

kernel32

LocalAlloc
GetSystemTimeAsFileTime
EnterCriticalSection
lstrcpyA

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE