3700627067e2d7901a4566aabac5bfb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3700627067e2d7901a4566aabac5bfb6_JaffaCakes118
Size

95KB
MD5

3700627067e2d7901a4566aabac5bfb6
SHA1

6c46f2deac0664596b89a42ddac389e5fc7ac226
SHA256

c251145b1c7378eb27d91fda7423ea2212ae60f02a992f93d33e4143eb755132
SHA512

b60fef708c4bdd233653565af7509f5443fabf566a9c7b0398ba050afdcc2227425986279121c4cd84e5bc5f6b9244e986c7fd8744e2fa878c5e6959329ff6c0
SSDEEP

1536:mVunWQvuKzo/zMZPHn4ut8zQJkPwJS6OQ6vRYY0paurM0VNzlGd2GkqFgTGYcsr6:mVWWQhZPVuDwJXOQ2RYXaAM7IGiTGT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3700627067e2d7901a4566aabac5bfb6_JaffaCakes118

Files

3700627067e2d7901a4566aabac5bfb6_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f8ff36fdac078bbd67ea98d503e9f809

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateMutexA
GetProcAddress
CreateEventA
CloseHandle
WaitForSingleObject

user32

SendMessageA
DrawIcon
DrawTextA
EndPaint
GetDC
GetForegroundWindow
InvalidateRect
GetDCEx
ReleaseDC
ShowWindow
PostMessageA
MoveWindow
BeginPaint

gdi32

CreatePen
CreateCompatibleDC
SelectObject
DeleteDC
TextOutA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ