337eea684ddef97cc944500c81fbeece_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

337eea684ddef97cc944500c81fbeece_JaffaCakes118
Size

40KB
MD5

337eea684ddef97cc944500c81fbeece
SHA1

52bf627adbbc3d27095c108e7ea2e0e60c7ecb2b
SHA256

7ddee08a62b0782ddcf0ae83c7602b4c1f60e2b2c7e7e2da5ae9e4250f96ef3e
SHA512

c25955d030d37be4f2ec0632dc8525fd2bd9dde1f694494a6616623d669164fef2204a7109ad3f3875c5e09be01b236de5d3b199a1736f9768046fe0701e380e
SSDEEP

768:l2T4jwgTOl/tFr60FIgbrcAztf9Jrd0NV+RQmgQ0N2UxZuf:oT40UOlzr7lMAztf7QmgQAyf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337eea684ddef97cc944500c81fbeece_JaffaCakes118

Files

337eea684ddef97cc944500c81fbeece_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d454e99d52225633e081d74626daa311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetThreadContext
GlobalAlloc
GlobalMemoryStatus
HeapAlloc
HeapCreate
WriteConsoleA
lstrcmpA
lstrcmpiA

msvcrt

strspn
_exit
free
realloc
srand
time
sscanf

user32

GetFocus
MsgWaitForMultipleObjects
SetWindowLongA
FrameRect

oleaut32

OleIconToCursor
GetErrorInfo
OleTranslateColor
RevokeActiveObject
SafeArrayAccessData

shlwapi

SHSetValueA
StrSpnA
StrRStrIA
SHDeleteKeyA

Sections

.text
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ