3f8e2394cf2e594e93c6ad73efc2735f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f8e2394cf2e594e93c6ad73efc2735f_JaffaCakes118
Size

62KB
MD5

3f8e2394cf2e594e93c6ad73efc2735f
SHA1

0ef2f03a24f824e35260fa823cb05d96c9d6b990
SHA256

e597bbf05301692829358c1a8c8460b2e26baa042ae2a81c63a5761220c7c14f
SHA512

ac2df427d06e18d17348f2307fade61ab3e41a60dae03bb9828730023ee5820d795bb38c4316ee5f9ca6cf1030c9247ec53b8b7cd4e8256299b1a8a19dcabe25
SSDEEP

768:XcxpEWhFdEDFhbd7J7fcOV8suxwrOpvqiSYYq/FD0dU4cLrQ9zsfksCO7r1i33Qa:0F4xh558Px8qqiFn6ZjGIHTpQZLGd9jR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f8e2394cf2e594e93c6ad73efc2735f_JaffaCakes118

Files

3f8e2394cf2e594e93c6ad73efc2735f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

29f8bd90ef2fefe0b4054ad15fd875f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareFileTime
CompareStringA
CreateMutexA
EnumResourceLanguagesA
FindResourceA
GetCPInfo
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapCreate
RaiseException
TlsAlloc
UpdateResourceA
VirtualProtect

user32

CallNextHookEx
DestroyWindow
DrawTextA
GetClassInfoA
GetFocus
GetMessageA
GrayStringA
IsWindowVisible
OpenClipboard
SendMessageA
SetActiveWindow
UpdateWindow

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ