3d7217d788a207c20f702f05cf3eb7f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d7217d788a207c20f702f05cf3eb7f9_JaffaCakes118
Size

59KB
MD5

3d7217d788a207c20f702f05cf3eb7f9
SHA1

19bc96e3b628ef1482de689f1d00a4500d5841be
SHA256

2f89114b8dc24a25477d1efa537cded277d6df3053ad7ba94f982e38324d73a5
SHA512

752f1e45c410fc1bb636cf17012021fd230d3dd069d70701b055cb811621b5f2a1cfb7ab362dfcfb0c8324c8ee1aebe8c0a7200643bb3e2616e0f307bd9fb3f6
SSDEEP

1536:O1Ghcvd2VX6Odwa51bz6lY6iPsEXEZSKU22Zfc/jA:Ocevw6O9bOiNXEk22ZAA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d7217d788a207c20f702f05cf3eb7f9_JaffaCakes118

Files

3d7217d788a207c20f702f05cf3eb7f9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

29f8bd90ef2fefe0b4054ad15fd875f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareFileTime
CompareStringA
CreateMutexA
EnumResourceLanguagesA
FindResourceA
GetCPInfo
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapCreate
RaiseException
TlsAlloc
UpdateResourceA
VirtualProtect

user32

CallNextHookEx
DestroyWindow
DrawTextA
GetClassInfoA
GetFocus
GetMessageA
GrayStringA
IsWindowVisible
OpenClipboard
SendMessageA
SetActiveWindow
UpdateWindow

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dataa
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ