3a98f311c9fddf5d66b1b2b034081737_JaffaCakes118 | Triage

Sharing

General

Target

3a98f311c9fddf5d66b1b2b034081737_JaffaCakes118
Size

35KB
MD5

3a98f311c9fddf5d66b1b2b034081737
SHA1

ab35e31d75f9a890bf75f764fbbcd2db2b92055c
SHA256

e573db1b6d50b79193668c6a012c156de39564f063d4cce1cd8916cd344ac606
SHA512

84ebc88035bdbb93507c8950a0697ed724bb8545d46aadee6e973c8b46e894505e3428a8d9ef577c0b11cfd6711b0f6a4a5eeb7185d2b8d441baa17e4b7f6d29
SSDEEP

768:qgGMRHLcq3zpYDqgDuIhvrghslpAZ5pvKnzKOa:qg/H3zpYDq0uIhcObAZrvKGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a98f311c9fddf5d66b1b2b034081737_JaffaCakes118

Files

3a98f311c9fddf5d66b1b2b034081737_JaffaCakes118
.dll windows:4 windows x86 arch:x86

535ff14c1e7f92c5aa458644ee921a94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DrawIcon
EnableScrollBar
EnableWindow
EndDeferWindowPos
DestroyWindow
LoadCursorFromFileA
OffsetRect
ShowCursor
DestroyCaret
CreateCursor
CloseWindow
IsCharUpperA
CharUpperA

kernel32

LocalAlloc
GetSystemTimeAsFileTime
EnterCriticalSection
lstrcpyA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE