4277e57bf91e3650b4807881f2b48147_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4277e57bf91e3650b4807881f2b48147_JaffaCakes118
Size

68KB
MD5

4277e57bf91e3650b4807881f2b48147
SHA1

a8f80e8dc432a79af3a3975694c6e196be10869e
SHA256

a66d56cd7536ddc28002445aad8a433d8a06a095b54e0a53bccf340766cbfb8d
SHA512

0b09464d0c9feecccb9767f667d88058be1b48df6bb77c4ab05c6eaeb3e1e4a792ca9a8be9aec09c20a4480fa6939e734de176a9de63b620dbbdc5c4c886c695
SSDEEP

1536:1GClCUFPnh/UikAQapcA05UraScARzZokNvkibaLKHO:1GC0Yh/UiKIuC9TwLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4277e57bf91e3650b4807881f2b48147_JaffaCakes118

Files

4277e57bf91e3650b4807881f2b48147_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8eb28d2cdfafffd53ddc552118e4b75f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
GetCommandLineA
GetCurrentProcessId
GetDateFormatA
GetOEMCP
GetStringTypeW
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapDestroy
InterlockedExchange
LocalReAlloc
SetErrorMode
SetHandleCount
UnhandledExceptionFilter
UpdateResourceA
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenW

user32

EmptyClipboard
GetClassInfoA
GetLastActivePopup
GetSysColorBrush
GetSystemMetrics
IsWindowVisible
LoadCursorA
ModifyMenuA
PostQuitMessage
SetTimer
TabbedTextOutA
ValidateRect

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ