403571cd442ae6151c4b0ec1fb94f241_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

403571cd442ae6151c4b0ec1fb94f241_JaffaCakes118
Size

105KB
MD5

403571cd442ae6151c4b0ec1fb94f241
SHA1

406376456db1db7fecd06750c91637af7c1760ff
SHA256

8b9db01f38c3cf13c9d00a2d94b689ba165634f3b4a80033c58f4a518b5e2db1
SHA512

6cad694a7a6d457b3449fbb3d572b4c060930f08a7aef9e8dc2d1ef6128ea6dbcd9d26d4b65c33382aef621000d56d7d679d2f291f9333d15e7fde3a642db06d
SSDEEP

3072:FcwO2rEl6EZXRsL2C5od9xjFFIQ1JflWwtKqit:GwO136QbF5HIoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
403571cd442ae6151c4b0ec1fb94f241_JaffaCakes118

Files

403571cd442ae6151c4b0ec1fb94f241_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a976dedfbf38cc3665fe0bca635cd64a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetModuleHandleA
GetStdHandle
GlobalHandle
GlobalUnlock
HeapAlloc
HeapCreate
HeapSize
LCMapStringA
MulDiv
SetFilePointer
UnhandledExceptionFilter
VirtualFree
lstrcpyA
lstrlenW

user32

CallNextHookEx
CharUpperA
ClientToScreen
EqualRect
GetKeyState
GetMenuCheckMarkDimensions
GetParent
GetPropA
GetWindowDC
IsDialogMessageA
IsRectEmpty
IsWindow
KillTimer
LoadBitmapA
PeekMessageA
ReleaseCapture
SendDlgItemMessageA

Sections

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ