357f49275f10dd7268e92f3e61a90405_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

357f49275f10dd7268e92f3e61a90405_JaffaCakes118
Size

113KB
MD5

357f49275f10dd7268e92f3e61a90405
SHA1

d8811d686f47a1e95000207b4f81bdef9d1fadbf
SHA256

1e8c7fe3a3d0659f09fa0a404b92ab568950905ece2c37150a4e6d8693151666
SHA512

a46a15795adbe328e4d43504b8868c8f211e7c432aae05ac30e564e22855dd93aee6da560cd852fadd95ac3d3ae9f4aeb221c64c152a41bf28030d97589eaeb9
SSDEEP

1536:F/Ho0t2494rFIrb4oV9/tIf9SXt2RbjZ4frp/SY+vxH2CJfNMW:Fw0t2fQXTFI1SXIRbt4qTvx/xNM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
357f49275f10dd7268e92f3e61a90405_JaffaCakes118

Files

357f49275f10dd7268e92f3e61a90405_JaffaCakes118
.dll windows:4 windows x86 arch:x86

834c47dae4d4d44db39f569002282151

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoW
GetLastError
CreateFileW

comdlg32

ChooseColorA

shell32

SHGetDesktopFolder

oleaut32

SafeArrayPtrOfIndex
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
SysReAllocStringLen
VariantInit

comctl32

ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Draw
ImageList_SetIconSize
ImageList_Read
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_BeginDrag
ImageList_DrawEx
ImageList_Create

Exports

Exports

eFeuIQirT

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ