40446f3e59533c0acc678ee0011789b3_JaffaCakes118 | Triage

Sharing

General

Target

40446f3e59533c0acc678ee0011789b3_JaffaCakes118
Size

231KB
MD5

40446f3e59533c0acc678ee0011789b3
SHA1

6c2a0da274380897000947d46f91f77d1092868e
SHA256

0b214657b42f8350d26ef635c7e85415c90b18a98df9af409915ac16ff4da88b
SHA512

cdc64bd655af327fae4493b07afd256fe9cb3f873924f476d194c20dbe694cca12da55fe61396b9af183857e1fbfe51486bc5c62c664c4dac986cb9db5f7e789
SSDEEP

6144:T/Jp9h4DsfBZU1PgsWvYfkamQioAAJjGZHgyq1u:rthssfBZUPbYXANGZjN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40446f3e59533c0acc678ee0011789b3_JaffaCakes118

Files

40446f3e59533c0acc678ee0011789b3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

ffc16c0f53911000f3677d27ea1ca0f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetMessageA
LoadAcceleratorsA
MessageBeep
MessageBoxA
OffsetRect
GetMenu
ShowCaret
ShowOwnedPopups
ShowWindow
ToAscii
GetFocus
EndMenu
EnableMenuItem
DrawTextA
DrawIcon
DrawCaption
DestroyWindow
CreateMenu
CopyRect
CharUpperA
BeginPaint
SetMenuInfo
ActivateKeyboardLayout

kernel32

lstrcmpiA
LeaveCriticalSection
RtlUnwind
lstrlenA
lstrcpyA
GetTimeFormatA
lstrcatA
TlsSetValue

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 63KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ