3bef39d4787d31bc2d198d71421a3909_JaffaCakes118 | Triage

Sharing

General

Target

3bef39d4787d31bc2d198d71421a3909_JaffaCakes118
Size

96KB
MD5

3bef39d4787d31bc2d198d71421a3909
SHA1

2debe058c9220341df80efab9f281d8f29153423
SHA256

0e489fcb91110754fac1bc1f80f9e1091c9983629bdb4348b926ce8e1232ae98
SHA512

a0325b2c171004b71876d9f9daa8e28d8f5e4613bbaafe2874106655aef6bbed8193618389c3cbef6b100e45a0d5d9e6708c93b29242d7867c9a1531de5ed46f
SSDEEP

3072:W44eYhg3IeJHxkJMH/wWipXKyihFABD4ypnu:b447jxKBD4yRu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bef39d4787d31bc2d198d71421a3909_JaffaCakes118

Files

3bef39d4787d31bc2d198d71421a3909_JaffaCakes118
.dll windows:4 windows x86 arch:x86

564799076ed453c4ba27fac557f151db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ShowOwnedPopups
MessageBoxIndirectA
LoadCursorFromFileA
LoadCursorA
IsCharLowerA
DrawIcon
DispatchMessageA
DestroyIcon
DestroyCaret
DefDlgProcA
CreateIconFromResourceEx
CreateDialogParamA
CreateDesktopW
CharNextA
ChangeMenuA

kernel32

ExitThread
FreeResource
EnumResourceTypesA
EnterCriticalSection
LoadResource
OpenFile
ReadFile
SetLastError
lstrlenA
lstrcmpA
UnmapViewOfFile
GetCommandLineA

oleaut32

OleLoadPicture
RegisterTypeLib
RevokeActiveObject
SysFreeString
SysReAllocString
SysStringLen
GetErrorInfo

Sections

.text
Size: 24KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ