3f6d4db54bb490b4d985e2ec6a9bdd4e_JaffaCakes118 | Triage

Sharing

General

Target

3f6d4db54bb490b4d985e2ec6a9bdd4e_JaffaCakes118
Size

101KB
MD5

3f6d4db54bb490b4d985e2ec6a9bdd4e
SHA1

0d833f65f8c13dbaebeb8d0be9be9cdcf61302f9
SHA256

91c03ee7e0928251bd4d818c7d0b0f24162405d89726a2fc9f278a5b7205ee3f
SHA512

7fb882ffc68e9c49d05cbb29ba3863363636bc34aaa434dfe59b4cdbbee1af3a6a0eaeb91c66f95df9fc094babc4c6b4ea04ef61e9bead1a74f906d3b7bce762
SSDEEP

3072:EukmmhRrnqDo+lIn6B6MNa+uhEhh9zT0onlaHS:7eek+qn6B64p8mlL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f6d4db54bb490b4d985e2ec6a9bdd4e_JaffaCakes118

Files

3f6d4db54bb490b4d985e2ec6a9bdd4e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8eb28d2cdfafffd53ddc552118e4b75f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
GetCommandLineA
GetCurrentProcessId
GetDateFormatA
GetOEMCP
GetStringTypeW
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapDestroy
InterlockedExchange
LocalReAlloc
SetErrorMode
SetHandleCount
UnhandledExceptionFilter
UpdateResourceA
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenW

user32

EmptyClipboard
GetClassInfoA
GetLastActivePopup
GetSysColorBrush
GetSystemMetrics
IsWindowVisible
LoadCursorA
ModifyMenuA
PostQuitMessage
SetTimer
TabbedTextOutA
ValidateRect

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 803B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ