34ceb6391442573a47b8bc763b8438e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ceb6391442573a47b8bc763b8438e2_JaffaCakes118
Size

11KB
MD5

34ceb6391442573a47b8bc763b8438e2
SHA1

55ca7e198cefde8da89f8d10f4d2cb84381a1dc5
SHA256

22b93a6a08fece674fb709dc34c86637357dd5606fa3a214b52e18100613378f
SHA512

63374e50b0349bbf145b59695b30612756bf3181f65abcde1df8c121e60a4dd51e6b510811ae6c300751ff513a9e1ef161d5655c1ca2f78cc5f70c0d380063d6
SSDEEP

192:ecx1pg66N57NNNk0CMlfOaqgSh5y4UROab0CTFaVgMcUjOdC7Jmk859hdH+wFdL:ecx1pgL7NNPpfloh5y4Yb0CTEpC0N6d3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34ceb6391442573a47b8bc763b8438e2_JaffaCakes118

Files

34ceb6391442573a47b8bc763b8438e2_JaffaCakes118
.dll windows:5 windows x86 arch:x86

bd565320e338b89ca9a2b3e0f9d7350d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
HeapAlloc
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
WriteFile
Sleep
CreateProcessA
ReadFile
FindFirstFileA
FindClose
MoveFileA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetVersion
DeleteFileA
CreateThread

user32

GetWindowThreadProcessId
OemKeyScan
EnumChildWindows
GetDlgItem
GetWindowLongA
EnumWindows
CloseDesktop
GetClientRect
FindWindowExA
CreateDesktopA
GetClassNameA

Exports

Exports

_Main@0

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ