39b303b9fb578abcbd48711c0edad8a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39b303b9fb578abcbd48711c0edad8a8_JaffaCakes118
Size

68KB
MD5

39b303b9fb578abcbd48711c0edad8a8
SHA1

1f89694e4b5e0f44774f862c18e92d5e04bdd079
SHA256

757b2b4388b328d0f516367ebe3d8f3c3e3ff6dd2ee7c004fd3000d065b0cd04
SHA512

3d4133aa896887d44cb53158591b08d43e3c5e7b4ef895532c25849cde6a5781f0b19a8ab612eb0d236fe041be1619f07b88997e90bd8a21c0d8c18dc1dfe58b
SSDEEP

1536:N8mU57O4oWazlK1gVaBeJVzyE1P60HSkac07hzgSuQ:N1w7O4n1bu15P6kaTzI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39b303b9fb578abcbd48711c0edad8a8_JaffaCakes118

Files

39b303b9fb578abcbd48711c0edad8a8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e383d294823b1b0c609f59520d7dbfe5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateMutexA
GetCommandLineA
GetCurrentThread
GetDateFormatA
GetLastError
GetStdHandle
GetVersion
GlobalUnlock
HeapAlloc
HeapCreate
HeapReAlloc
LocalFree
MoveFileA
SystemTimeToFileTime
VirtualQuery
lstrcmpA

user32

wsprintfA
DispatchMessageA
GetClassLongA
GetDesktopWindow
GetKeyState
GetScrollPos
GetSysColorBrush
InvalidateRect
IsDialogMessageA
LoadIconA
MessageBoxA
ModifyMenuA
ReleaseCapture
SetActiveWindow
ShowWindow
SystemParametersInfoA
UnregisterClassA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ