3c54e8de6bfe217b3d253a9059d2859a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c54e8de6bfe217b3d253a9059d2859a_JaffaCakes118
Size

37KB
MD5

3c54e8de6bfe217b3d253a9059d2859a
SHA1

5a93ddadbeec352714444319d40ca45291b73596
SHA256

039d5f061d4524d6b6555160870a8e68c0bfafbb71d137c77e9530cd5df3f3a2
SHA512

e82983cde19521d96d72272c77b189be59b458e737e62015a331913aa49a5b5b65ba7f6ccc7be2dedd48cceea933ada447c1d6e78424a1863a1a196296b658e5
SSDEEP

384:cCtkXcRoZu9UHT1+vgDHDf/GTNZFuSJKVCODHrFtrp9Mm:yHT0QiTNZUVCODhtp9M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c54e8de6bfe217b3d253a9059d2859a_JaffaCakes118

Files

3c54e8de6bfe217b3d253a9059d2859a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1b92a44b6ba5dd3ddf583213de40c17c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetCurrentThread
LoadLibraryA
LocalAlloc
GetFileType
LocalFree
GetCurrentDirectoryA
GetVersionExA
CloseHandle
GetVersion
GetModuleHandleA
GetProcAddress

user32

EndPaint
CharNextA
GetFocus
GetKeyState
DispatchMessageA
TranslateMessage
BeginPaint
GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ