360066b8bb16e946be8088139178269b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

360066b8bb16e946be8088139178269b_JaffaCakes118
Size

1.3MB
MD5

360066b8bb16e946be8088139178269b
SHA1

090af34b6e203b8432631ab5d9bcc096ae3dcf33
SHA256

c62bf437b765feb7f7d7547022def0706c673e02115f82513d8766861e147add
SHA512

ca28af956f464cff444d8d92e14128ddfa87eb48a1ca9cf934aa5565640d8ae80fdb98982b3fb192e7ec20f12a7ba1597ab2395b8f92a843f2ee2518e5b5526e
SSDEEP

24576:iOQbHQ2s61VMYg+RNjAfjSNgjVLKKjmxK4AlPCa+WazwI:iOQTQ2spYRXjAfj6gjdKRs4Gaa+Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
360066b8bb16e946be8088139178269b_JaffaCakes118

Files

360066b8bb16e946be8088139178269b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Exports

Exports

CreateFilePtc
DeviceIoEmu
FakeHandle
GetFakeSize
ReadFilePtc
SetFakePointer

Sections

Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ewimabkt
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nvwdorwa
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE