3a35a8a4225143ea564e10eab3872e21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a35a8a4225143ea564e10eab3872e21_JaffaCakes118
Size

106KB
MD5

3a35a8a4225143ea564e10eab3872e21
SHA1

392aa21a5a8b4c5e0fe2b7648e3e3a76deb6b23b
SHA256

7582207ea837e499bbfa966dedc0da93e2083c6681e3d2e87300068a84fc70a7
SHA512

6101d326223f652abbb0cc61851bcd3218f3d59c0361c974ba615b650b437304357a7233a54a6ac3a04ba2406ed527ae163afc363ed8f127644dadd2a1322898
SSDEEP

3072:2JHvRX6Iy9v9UjVQ2oBHMHJmvXWjcpLT0HQ03zKR:uRX6ZWjVQHBHMIOApLAHQ03C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a35a8a4225143ea564e10eab3872e21_JaffaCakes118

Files

3a35a8a4225143ea564e10eab3872e21_JaffaCakes118
.dll windows:4 windows x86 arch:x86

7d3b4559d74c1f39097d33709601add8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
FreeLibrary
GetFileSize
GetThreadLocale
GlobalDeleteAtom
GlobalFree
GlobalGetAtomNameA
HeapAlloc
HeapCreate
HeapSize
MultiByteToWideChar
OpenEventA
SetStdHandle
VirtualProtect

user32

CopyRect
DispatchMessageA
EmptyClipboard
GetDesktopWindow
GetScrollPos
GrayStringA
LoadCursorA
MapDialogRect
ModifyMenuA
PostQuitMessage
RegisterClipboardFormatA
SetWindowTextA
TabbedTextOutA

Sections

CODE
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ