3b1806c45a28494e181c33dfe46afdcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b1806c45a28494e181c33dfe46afdcb_JaffaCakes118
Size

245KB
MD5

3b1806c45a28494e181c33dfe46afdcb
SHA1

2cf6d1b880db9cfa3e78977cac4fe53ca6620ef5
SHA256

bdc303908384d9af29c8f3e0726c357fcaecb81d4ff6b34ad27f468ccee13d5d
SHA512

2cc85d3241c5681941a74349db170d7ab78f96ec49babb6cca761f4bf9d7d31b5e3deb73068f9605e470b8afa77bff1a2a18196b4fb95c946f3e597617be1997
SSDEEP

6144:c0qaqjuriDfcyVLRoCvFwq19Aqq8xMy/dHjnflC+TNoqZT:c0dEurGcyVLRL6hqq8agdHjf4ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b1806c45a28494e181c33dfe46afdcb_JaffaCakes118

Files

3b1806c45a28494e181c33dfe46afdcb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ba938bca3dda30ab7bfb353cf78f2932

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

LoadIconA
GetDlgItem
EnableWindow
DrawStateA
DispatchMessageA
DestroyCursor
CreateIconFromResourceEx
CloseWindow
CharToOemA
ChangeMenuA
ShowCaret
BeginPaint

kernel32

WriteFile
UnmapViewOfFile
TlsGetValue
MapViewOfFile
LoadLibraryA
GetPrivateProfileStringA
GetModuleHandleA
ExitThread
EnterCriticalSection
lstrcpyA

Sections

.text
Size: 152KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 91KB - Virtual size: 490KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ